CVE-2006-2355
Last modified
CVE-2006-2355 is a vulnerability of currently unknown severity. Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.. EPSS estimates a 3.79% chance of exploitation in the next 30 days.
Description
Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ipswitch | Whatsup Professional | 2006 |
| Ipswitch | Whatsup Professional | 2006_premium |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-2355?
How severe is CVE-2006-2355?
How do I fix CVE-2006-2355?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-2349E-Business Designer (eBD) 3.1.4 and earlier allows remote at…
- CVE-2006-2350Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2006-2351Multiple cross-site scripting (XSS) vulnerabilities in IPswi…
- CVE-2006-2352Multiple cross-site scripting (XSS) vulnerabilities in IPswi…
- CVE-2006-2353NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Profession…
- CVE-2006-2354NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 an…
- CVE-2006-2356NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professi…
- CVE-2006-2357Ipswitch WhatsUp Professional 2006 and WhatsUp Professional …
- CVE-2006-2358Multiple cross-site scripting (XSS) vulnerabilities in vario…
- CVE-2006-2359Cross-site scripting (XSS) vulnerability in charts.php in th…
- CVE-2006-2360SQL injection vulnerability in charts.php in the Chart mod f…
- CVE-2006-2361PHP remote file inclusion vulnerability in pafiledb_constant…
Are you affected by CVE-2006-2355?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST