vulnerability

Progress WhatsUp Gold: CVE-2022-42711: Improper Neutralization of Input During Web Page Generation

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 12, 2022
Added
Jul 9, 2025
Modified
Jul 9, 2025

Description

In Progress WhatsUp Gold before 22.1.0, an SNMP MIB Walker application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser.

Solution

progress-whatsup-gold-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.