CVE-2006-2354: Ipswitch WhatsUp Professional

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Ipswitch WhatsUp Professional: version 2006 only; version 2006_premium only

Published 2006-05-15. Last modified 2026-06-16.