CVE-2023-35759: Progress WhatsUp Gold

Medium severity, CVSS 6.1. EPSS: 2.1% chance of exploitation in the next 30 days.

In Progress WhatsUp Gold before 23.0.0, an SNMP-related application endpoint failed to adequately sanitize malicious input. This could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS.

Affected products

• Progress WhatsUp Gold: before 23.0.0 (fixed in 23.0.0)

Published 2023-06-23. Last modified 2026-06-17.