progress

261 tracked vulnerabilities.

CVE-2024-2448 HIGH
LoadMaster 7.2.49.0-7.2.54.8 and 7.2.55.0-7.2.59.2 - Authenticated OS Command Injection via UI Component
Mar 22, 2024
CVSS 8.4
EPSS 0.55
CVE-2024-2291 MEDIUM
MOVEit Transfer <2022.0.11, 2022.1.12, 2023.0.9, 2023.1.4 - Auth By...
Mar 20, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-1856 HIGH
Progress Telerik Reporting < 18.0.24.130 - Remote Code Execution via Insecure Deserialization
Mar 20, 2024
CVSS 8.5
EPSS 0.01
CVE-2024-1801 HIGH
Progress Telerik Reporting < 18.0.24.130 - Local Code Execution via Insecure Deserialization
Mar 20, 2024
CVSS 7.7
EPSS 0.00
CVE-2024-1800 CRITICAL
Progress Telerik Report Server < 10.0.24.130 - Remote Code Execution via Insecure Deserialization
Mar 20, 2024
CVSS 9.9
EPSS 0.40
CVE-2024-1636 HIGH
Sitefinity < 13.3.7649 - Cross-Site Scripting in Page Editing Area
Feb 28, 2024
CVSS 8.0
EPSS 0.00
CVE-2024-1632 HIGH
Progress Sitefinity < 13.3.7649 - Authenticated Sensitive Information Exposure in Administrative Area
Feb 28, 2024
CVSS 8.8
EPSS 0.01
CVE-2024-1403 CRITICAL
OpenEdge < 11.7.19 - Authentication Bypass via Credential Handling Failure
Feb 27, 2024
CVSS 10.0
EPSS 0.03
CVE-2024-1212 CRITICAL KEVNUCLEI
LoadMaster 7.2.48.1-7.2.48.9 - Unauthenticated OS Command Injection
Feb 21, 2024
CVSS 10.0
EPSS 0.95
CVE-2024-1474 HIGH
WS_FTP Server < 8.8.5 - Reflected Cross-Site Scripting in Administrative Interface
Feb 21, 2024
CVSS 7.5
EPSS 0.00
CVE-2024-0833 HIGH
Telerik Test Studio <v2023.3.1330 - Privilege Escalation
Jan 31, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-0832 HIGH
Telerik Reporting <2024 R1 - Privilege Escalation
Jan 31, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-0219 HIGH
Telerik JustDecompile < 2019.1.118.0 - Privilege Escalation via Installer Manipulation
Jan 31, 2024
CVSS 7.8
EPSS 0.00
CVE-2024-0396 HIGH
Progress MOVEit Transfer < 2022.0.10, 2022.1.11, 2023.0.8, 2023.1.3 - DoS via HTTPS Parameter Manipulation
Jan 17, 2024
CVSS 7.1
EPSS 0.01
CVE-2023-27636 MEDIUM
Progress Sitefinity < 15.0.0 - Authenticated Cross-Site Scripting via Content Form
Jun 16, 2024
CVSS 5.4
EPSS 0.01
CVE-2023-40052 HIGH
Progress OpenEdge 11.7-11.7.17 and 12.2-12.2.12 - Denial of Service via Malformed Web Request
Jan 18, 2024
CVSS 7.5
EPSS 0.01
CVE-2023-40051 CRITICAL
Progress OpenEdge PASOE < 11.7.18, 12.2-12.2.13, < 12.8.0 - Unauthenticated Arbitrary File Upload via WEB Transport
Jan 18, 2024
CVSS 9.1
EPSS 0.01
CVE-2023-6784 MEDIUM
Progress Sitefinity 4.0-13.3.7648 - Phishing Email Distribution
Dec 20, 2023
CVSS 4.7
EPSS 0.00
CVE-2023-6595 HIGH
WhatsUp Gold <2023.1 - Info Disclosure
Dec 14, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-6368 MEDIUM
WhatsUp Gold <2023.1 - Info Disclosure
Dec 14, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-6367 HIGH
WhatsUp Gold < 23.1.0 - Stored Cross-Site Scripting in Roles
Dec 14, 2023
CVSS 7.6
EPSS 0.01
CVE-2023-6366 HIGH
WhatsUp Gold < 23.1.0 - Stored Cross-Site Scripting in Alert Center
Dec 14, 2023
CVSS 7.6
EPSS 0.01
CVE-2023-6365 HIGH
WhatsUp Gold < 23.1.0 - Stored Cross-Site Scripting via Device Group
Dec 14, 2023
CVSS 7.6
EPSS 0.01
CVE-2023-6364 HIGH
WhatsUp Gold < 23.1.0 - Stored Cross-Site Scripting in Dashboard Component
Dec 14, 2023
CVSS 7.6
EPSS 0.01
CVE-2023-6218 HIGH
MOVEit Transfer <2022.0.9, 2022.1.10, 2023.0.7 - Privilege Escalation
Nov 29, 2023
CVSS 7.2
EPSS 0.01
Products
whatsup_gold 56 moveit_transfer 33 ws_ftp_server 28 sitefinity 24 loadmaster 21 telerik_reporting 14 openedge 12 MOVEit Transfer 9 moveit_automation 8 telerik_ui_for_asp.net_ajax 8 ecs_connection_manager 7 multi-tenant_loadmaster 7 telerik_report_server 7 connection_manager_for_objectscale 6 progress 5 sitefinity_cms 5 flowmon 4 telerik_document_processing_libraries 3 telerik_ui_for_winforms 3 DataDirect Connect for JDBC Autonomous REST Connector 2 DataDirect Connect for JDBC for Amazon Redshift 2 DataDirect Connect for JDBC for Apache Cassandra 2 DataDirect Connect for JDBC for Apache Impala 2 DataDirect Connect for JDBC for Apache SparkSQL 2 DataDirect Connect for JDBC for DB2 2 DataDirect Connect for JDBC for Google Analytics 4 2 DataDirect Connect for JDBC for Google BigQuery 2 DataDirect Connect for JDBC for Greenplum 2 DataDirect Connect for JDBC for Hive 2 DataDirect Connect for JDBC for Informix 2
Quick Filters
Critical CVEs With Exploits In CISA KEV