CVE-2006-2351 - CVE House
Back to Database
Status published Medium CVE-2006-2351

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2351

Credits & Attribution

No credits recorded in the NVD database.

References

More from ipswitch

View All →
CVE-2019-18465
In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has...
Critical 9.8
CVE-2019-18464
In Progress MOVEit Transfer 10.2 before 10.2.6 (2018.3), 11.0 before...
Critical 9.8
CVE-2019-16383
MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019...
Critical 9.4
CVE-2019-12146
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress...
Critical 9.1
CVE-2019-12145
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress...
High 7.5

Affected Vendor

Affected Software

whatsup professional
Vulnerable Versions:
2006, 2006_premium

Timeline

Official Publish: May 15th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.