CVE-2024-4885

CriticalCVSS 9.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The

WhatsUp.ExportUtilities.Export.GetFileWithoutZip

allows execution of commands with iisapppool\nmconsole privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Jun 25, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Mar 3, 2025
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-488507.2Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-EnterpriCVE-2024-488517.2Improper Validation of Specified Type of Input vulnerability in ABB FLXEON.A remote code execution is possible due to an improper input valiCVE-2024-488529.4Insertion of Sensitive Information into Log File vulnerability observed in FLEXON. Some information may be improperly disclosed through httpCVE-2024-488539.0An escalation of privilege vulnerability in ASPECT could provide an attacker root access to a server when logged in as a "non" root ASPECT uCVE-2024-488547.5Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an informatioCVE-2024-488557.5Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an informatCVE-2024-488569.8Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-ofCVE-2024-488577.5NULL pointer dereference in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a deniCVE-2024-488587.5Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denCVE-2024-488599.1An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerabilityCVE-2024-48864.3The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the requestCVE-2024-488609.8An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remo
CVE-2024-4885: Critical severity, CVSS 9.8 | Vulnix