Progress Software vulnerabilities
285 CVEs and advisories name Progress Software as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2023-6218MOVEit Transfer Group Admin Privilege Escalation
- CVE-2023-6217MOVEit Transfer XSS via MOVEit Gateway
- CVE-2023-42659WS_FTP Server Arbitrary File Upload
- CVE-2023-42658InSpec Archive Command Vulnerable to Maliciously Crafted Profile
- CVE-2023-40050Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application
- CVE-2023-40049WS_FTP Server Information Disclosure via Directory Listing
- CVE-2023-40048WS_FTP Server Cross-Site Request Forgery (CSRF) Vulnerability
- CVE-2023-40047WS_FTP Server Stored Cross-Site Scripting Vulnerability
- CVE-2023-40046WS_FTP Server SQL Injection via Administrative Interface
- CVE-2023-40045WS_FTP Server Ad Hoc Transfer Module Reflected Cross-Site Scripting Vulnerability
- CVE-2023-42657WS_FTP Server Directory Traversal
- CVE-2023-40044WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
- CVE-2023-42656MOVEit Transfer Reflected XSS
- CVE-2023-40043MOVEit Transfer System Administrator SQL Injection
- CVE-2023-42660MOVEit Transfer Machine Interface SQL Injection