CVE-2006-2353: Ipswitch WhatsUp Professional

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters.

Affected products

• Ipswitch WhatsUp Professional: version 2006 only; version 2006_premium only

Published 2006-05-15. Last modified 2026-06-16.