Progress Software vulnerabilities
285 CVEs and advisories name Progress Software as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-0332Progress UI for WinForms decompression path traversal vulnerability
- CVE-2025-0556Telerik Report Server Clear Text Transmission of Agent Commands
- CVE-2024-12251Improper neutralization special element in hyperlinks
- CVE-2024-11626Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerabilit
- CVE-2024-11625Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from
- CVE-2024-12105WhatsUp Gold - SnmpExtendedActiveMonitor path traversal
- CVE-2024-12106WhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authentication
- CVE-2024-12108WhatsUp Gold - Public API signing key rotation issue
- CVE-2024-10095Progress UI for WPF format provider unsafe deserialization vulnerability
- CVE-2024-8785WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability
- CVE-2024-46909WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-46905WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability
- CVE-2024-46906WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability
- CVE-2024-46907WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability
- CVE-2024-46908WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability
- CVE-2024-7295Hard-coded credentials used for temporary and cache data encryption
- CVE-2024-8049Telerik Document Processing Improper Handling of Memory Resources
- CVE-2024-10012Progress UI for WPF format provider unsafe deserialization vulnerability
- CVE-2024-10013Progress UI for WinForms format provider unsafe deserialization vulnerability
- CVE-2024-9999Multi-Factor Authentication Bypass in Progress WS_FTP Server
- CVE-2024-9825The Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access token
- CVE-2024-7763WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability
- CVE-2024-8015Telerik Report Server Insecure Type Resolution
- CVE-2024-7292Account Controller allows high count of login attempts
- CVE-2024-7294Uncontrolled resource consumption of anonymous endpoints
- CVE-2024-7293Password policy for new users is not strong enough
- CVE-2024-7840Improper neutralization special element in hyperlinks
- CVE-2024-8048Telerik Reporting Insecure Expression Evaluation
- CVE-2024-8014Telerik Reporting EntityDataSource Insecure Type Resolution
- CVE-2024-8316Progress UI for WPF format provider unsafe deserialization vulnerability