CVE-2006-2351: Ipswitch WhatsUp Professional

Medium severity, CVSS 4.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

Affected products

• Ipswitch WhatsUp Professional: version 2006 only; version 2006_premium only

Published 2006-05-15. Last modified 2026-06-16.