Progress Software vulnerabilities
285 CVEs and advisories name Progress Software as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-7576Progress UI for WPF format provider unsafe deserialization vulnerability
- CVE-2024-7575Improper neutralization special element in hyperlinks
- CVE-2024-7679Improper neutralization special element in hyperlinks
- CVE-2024-6672WhatsUp Gold getMonitorJoin SQL Injection Privilege Escalation Vulnerability
- CVE-2024-6671WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability
- CVE-2024-6670WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
- CVE-2024-7745Multi-Factor Authentication Bypass in Progress WS_FTP Server
- CVE-2024-7744Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server
- CVE-2024-6096Unsafe Deserialization Vulnerability
- CVE-2024-6327Progress Telerik Report Server Deserialization
- CVE-2024-4882URL Redirection to Arbitrary Site Exists in Sitefinity
- CVE-2024-5019WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure Vulnerability
- CVE-2024-5018WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure Vulnerability
- CVE-2024-5017WhatsUp Gold AppProfileImport path traversal vulnerability
- CVE-2024-5016WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability
- CVE-2024-5015WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure Vulnerability
- CVE-2024-5014WhatsUp Gold GetASPReport Server-Side Request Forgery Information Disclosure
- CVE-2024-5013WhatsUp Gold InstallController Denial-of-Service Vulnerability
- CVE-2024-5012WhatsUp Gold Missing Authentication GetWindowsCredential Information Disclosure Vulnerability
- CVE-2024-5011WhatsUp Gold TestController Chart denial of service vulnerability
- CVE-2024-5010WhatsUp Gold TestController multiple information disclosure vulnerabilities
- CVE-2024-5009WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability
- CVE-2024-5008WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability
- CVE-2024-4885WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-4884WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability
- CVE-2024-4883WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
- CVE-2024-4358Registration Authentication Bypass Vulnerability
- CVE-2024-4563The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit Length
- CVE-2024-4837Trust Boundary Violation Vulnerability
- CVE-2024-4357XML External Entity Processing Information Disclosure