Login Request a demo
OP
Product
OpenEdge
by Progress · last CVE Sep 3, 2024
12
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 4High 3Medium 2Low 0
Severity
All severities12Critical4High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add OpenEdge to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40051
9.9
1%
Jan 18
Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal
Affected: 11.7 before 11.7.18; 12.2 before 12.2.13
CVE-2024-1403
9.8
3%
Feb 27
Authentication Bypass in OpenEdge Authentication Gateway and AdminServer
Affected: 11.7.0 before 11.7.19; 12.2.0 before 12.2.14; 12.8.0 before 12.8.1
CVE-2015-9245
9.8
2%
Oct 31
Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute…
Affected: 10.2a; 10.2b; 10.2b07; 10.2b08; 11.0; 11.1; +4 more
CVE-2024-7345
9.6
1%
Sep 3
Direct local client connections to MS Agents can bypass authentication
Affected: 11.7.0 through 11.7.19; 12.2.0 through 12.2.14
Showing 4