CVE-2025-2572: Progress WhatsUp Gold

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

In WhatsUp Gold versions released before 2024.0.3, a database manipulation vulnerability allows an unauthenticated attacker to modify the contents of WhatsUp.dbo.WrlsMacAddressGroup.

Affected products

• Progress WhatsUp Gold: before 24.0.3 (fixed in 24.0.3)

Published 2025-04-14. Last modified 2026-06-17.