Progress Software vulnerabilities
285 CVEs and advisories name Progress Software as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-4200Progress Telerik Reporting Local Deserialization Vulnerability
- CVE-2024-4202Progress Telerik Reporting Local Instantiation Vulnerability
- CVE-2024-3892Local code execution vulnerability in Telerik UI for WinForms
- CVE-2024-4562WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettings
- CVE-2024-4561WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconController
- CVE-2024-3544LoadMaster Hardcoded SSH Key
- CVE-2024-3543LoadMaster Reversible Password Encryption Algorithm
- CVE-2024-2389Flowmon Unauthenticated Command Injection Vulnerability
- CVE-2024-2449LoadMaster Cross-Site Request Forgery (CSRF)
- CVE-2024-2448LoadMaster Command Injection Vulnerability
- CVE-2024-2291MOVEit Transfer Logging Bypass Vulnerability
- CVE-2024-1856Progress Telerik Reporting Remote Deserialization Vulnerability
- CVE-2024-1801Progress Telerik Reporting Local Deserialization Vulnerability
- CVE-2024-1800Progress Telerik Report Server Deserialization
- CVE-2024-1636Potential Cross-Site Scripting (XSS) in the page editing area
- CVE-2024-1632Incorrect access control in the Sitefinity backend
- CVE-2024-1212LoadMaster Pre-Authenticated OS Command Injection
- CVE-2024-0833Privilege Elevation via Telerik Test Studio
- CVE-2024-0832Privilege Elevation via Telerik Reporting Installer
- CVE-2024-0219Privilege Elevation via Telerik JustDecompile Installer
- CVE-2023-40052Progress Application Server (PAS) for OpenEdge Denial of Service
- CVE-2023-40051Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal
- CVE-2024-0396Missing Server-Side Input Validation in HTTP Parameter
- CVE-2023-6784Potential Use of the Sitefinity System for Distribution of Phishing Emails
- CVE-2023-6368WhatsUp Gold Unauthenticated Access to an API Endpoint
- CVE-2023-6595WhatsUp Gold Unauthenticated Access to an API Endpoint
- CVE-2023-6367WhatsUp Gold Stored Cross-Site Scripting (XSS) via Roles
- CVE-2023-6366WhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert Center
- CVE-2023-6365WhatsUp Gold Stored Cross-Site Scripting (XSS) via Device Groups
- CVE-2023-6364WhatsUp Gold Stored Cross-Site Scripting (XSS) via Dashboard