Login Request a demo
PS
Vendor
Progress Software Corporation
8 products with CVEs on record
60
CVEs
2
On KEV
31
New 30D
Products
MS
MarkLogic Server
Progress Software Corporation
9.9
41 CVEs0 on KEV31 new
TR
Telerik Report Server
Progress Software Corporation
9.8
6 CVEs1 on KEV0 new
WS
WS_FTP Server
Progress Software Corporation
8.8
4 CVEs1 on KEV0 new
OP
OpenEdge
Progress Software Corporation
9.1
3 CVEs0 on KEV0 new
SI
Sitefinity
Progress Software Corporation
7.7
3 CVEs0 on KEV0 new
CH
Chef Habitat Builder
Progress Software Corporation
5.4
1 CVEs0 on KEV0 new
PT
Progress® Telerik® Reporting
Progress Software Corporation
5.3
1 CVEs0 on KEV0 new
TR
Telerik Reporting
Progress Software Corporation
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-85976
MS
MarkLogic Server
Progress Software Corporation
5.4
0%
Oct 12HTTP response splitting in Progress MarkLogic Server Query Console
CVE-2026-85975
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Cleartext transmission in Progress MarkLogic Server Amazon S3 connections
CVE-2026-85974
MS
MarkLogic Server
Progress Software Corporation
7.4
0%
Oct 12Improper TLS hostname verification in Progress MarkLogic Server
CVE-2026-85973
MS
MarkLogic Server
Progress Software Corporation
7.4
0%
Oct 12Cleartext transmission in Progress MarkLogic Server cluster join operations
CVE-2026-85972
MS
MarkLogic Server
Progress Software Corporation
7.4
0%
Oct 12Improper Kerberos server verification in Progress MarkLogic Server
CVE-2026-85971
MS
MarkLogic Server
Progress Software Corporation
7.1
0%
Oct 12Incorrect log file permissions in Progress MarkLogic Server
CVE-2026-85970
MS
MarkLogic Server
Progress Software Corporation
7.1
0%
Oct 12Improper XML external entity restriction in Progress MarkLogic Server
CVE-2026-85969
MS
MarkLogic Server
Progress Software Corporation
7.1
0%
Oct 12Out-of-bounds write in Progress MarkLogic Server
CVE-2026-85968
MS
MarkLogic Server
Progress Software Corporation
7.1
0%
Oct 12Out-of-bounds read in Progress MarkLogic Server
CVE-2026-85967
MS
MarkLogic Server
Progress Software Corporation
6.1
0%
Oct 12Cross-site scripting in Progress MarkLogic Server
CVE-2026-85966
MS
MarkLogic Server
Progress Software Corporation
7.7
0%
Oct 12Exposure of sensitive information in Progress MarkLogic Server
CVE-2026-85965
MS
MarkLogic Server
Progress Software Corporation
8.0
0%
Oct 12Use-after-free in Progress MarkLogic Server JavaScript engine integration
CVE-2026-85964
MS
MarkLogic Server
Progress Software Corporation
7.7
0%
Oct 12Path traversal in Progress MarkLogic Server Query Console
CVE-2026-85963
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector
CVE-2026-85962
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Improper authentication in Progress MarkLogic Server SAML processing
CVE-2026-85961
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Sensitive information exposure in Progress MarkLogic Server Azure deployments
CVE-2026-85960
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Cross-site request forgery in Progress MarkLogic Server Query Console
CVE-2026-85959
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Insufficient authentication logging in Progress MarkLogic Server
CVE-2026-85958
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Improper OAuth token validation in Progress MarkLogic Server
CVE-2026-85957
MS
MarkLogic Server
Progress Software Corporation
7.5
0%
Oct 12Improper XML external entity restriction in Progress MarkLogic Server SAML processing
CVE-2026-85956
MS
MarkLogic Server
Progress Software Corporation
9.6
0%
Oct 12Improper privilege management in Progress MarkLogic Server backup and restore operations
CVE-2026-85955
MS
MarkLogic Server
Progress Software Corporation
9.9
1%
Oct 12Improper privilege management in Progress MarkLogic Server xdmp:eval-in
CVE-2026-85954
MS
MarkLogic Server
Progress Software Corporation
8.6
0%
Oct 12Improper privilege management in Progress MarkLogic Server higher-order XQuery functions
CVE-2026-85953
MS
MarkLogic Server
Progress Software Corporation
8.5
0%
Oct 12Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio
CVE-2026-85952
MS
MarkLogic Server
Progress Software Corporation
8.5
0%
Oct 12Server-side request forgery in Progress MarkLogic Server Linux cloud deployments
CVE-2026-85951
MS
MarkLogic Server
Progress Software Corporation
8.5
0%
Oct 12Server-side request forgery in Progress MarkLogic Server Azure deployments
CVE-2026-85950
MS
MarkLogic Server
Progress Software Corporation
8.4
0%
Oct 12Improper privilege management in Progress MarkLogic Server REST extensions
CVE-2026-85949
MS
MarkLogic Server
Progress Software Corporation
8.1
0%
Oct 12Sensitive information exposure in Progress MarkLogic Server trace logs
CVE-2026-85948
MS
MarkLogic Server
Progress Software Corporation
9.9
0%
Oct 12Improper privilege management in Progress MarkLogic Server Management API
CVE-2026-85947
MS
MarkLogic Server
Progress Software Corporation
9.9
0%
Oct 12Improper privilege management in Progress MarkLogic Server forest operations
CVE-2026-9191
MS
MarkLogic Server
Progress Software Corporation
9.6
0%
Oct 12Insufficient isolation of user-supplied code in Progress MarkLogic Server
CVE-2026-9203
MS
MarkLogic Server
Progress Software Corporation
8.5
0%
Aug 5Server-side request forgery in Progress MarkLogic Server
CVE-2026-9195
MS
MarkLogic Server
Progress Software Corporation
9.3
1%
Aug 5Cross-site scripting in Progress MarkLogic Server Query Console
CVE-2026-9193
MS
MarkLogic Server
Progress Software Corporation
9.9
0%
Aug 5Privilege escalation in Progress MarkLogic Server Hadoop integration
CVE-2026-9192
MS
MarkLogic Server
Progress Software Corporation
9.8
1%
Aug 5Authentication bypass in Progress MarkLogic Server ODBC App Server
CVE-2026-9190
MS
MarkLogic Server
Progress Software Corporation
9.1
1%
Aug 5HTTP request smuggling in Progress MarkLogic Server
CVE-2026-8709
MS
MarkLogic Server
Progress Software Corporation
9.9
0%
Aug 5Privilege escalation in Progress MarkLogic Server REST document patch operation
CVE-2026-7557
MS
MarkLogic Server
Progress Software Corporation
9.1
0%
Aug 5SAML authentication bypass in Progress MarkLogic Server
CVE-2026-7329
MS
MarkLogic Server
Progress Software Corporation
9.9
1%
Aug 5Privilege escalation in Progress MarkLogic Server REST query interfaces
CVE-2026-7327
MS
MarkLogic Server
Progress Software Corporation
8.1
0%
Aug 5Privilege escalation in Progress MarkLogic Server REST API document processing
CVE-2026-7326
MS
MarkLogic Server
Progress Software Corporation
8.8
0%
Aug 5Cross-site request forgery in Progress MarkLogic Server Admin UI
CVE-2025-8095
OP
OpenEdge
Progress Software Corporation
9.1
0%
Apr 14Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge
CVE-2025-7389
OP
OpenEdge
Progress Software Corporation
8.2
0%
Apr 14Unauthorized Arbitrary File Read via RMI in AdminServer Interface
CVE-2025-7388
OP
OpenEdge
Progress Software Corporation
8.4
1%
Sep 4Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
CVE-2025-1968
SI
Sitefinity
Progress Software Corporation
7.7
0%
Apr 9Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay…
CVE-2024-6097
PT
Progress® Telerik® Reporting
Progress Software Corporation
5.3
1%
Feb 12Absolute Path Traversal Vulnerability
CVE-2024-11626
SI
Sitefinity
Progress Software Corporation
4.8
0%
Jan 7Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue…
CVE-2024-11625
SI
Sitefinity
Progress Software Corporation
5.3
0%
Jan 7Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200…
CVE-2024-7295
TR
Telerik Report Server
Progress Software Corporation
6.2
0%
Nov 13Hard-coded credentials used for temporary and cache data encryption
CVE-2024-9999
WS
WS_FTP Server
Progress Software Corporation
6.5
0%
Nov 12Multi-Factor Authentication Bypass in Progress WS_FTP Server
CVE-2024-9825
CH
Chef Habitat Builder
Progress Software Corporation
5.4
0%
Oct 28The Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access token
CVE-2024-7292
TR
Telerik Report Server
Progress Software Corporation
8.8
0%
Oct 9Account Controller allows high count of login attempts
CVE-2024-7294
TR
Telerik Report Server
Progress Software Corporation
6.5
0%
Oct 9Uncontrolled resource consumption of anonymous endpoints
CVE-2024-7293
TR
Telerik Report Server
Progress Software Corporation
8.8
0%
Oct 9Password policy for new users is not strong enough
CVE-2024-7745
WS
WS_FTP Server
Progress Software Corporation
8.1
0%
Aug 28Multi-Factor Authentication Bypass in Progress WS_FTP Server
CVE-2024-7744
WS
WS_FTP Server
Progress Software Corporation
6.5
1%
Aug 28Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server
CVE-2024-6096
TR
Telerik Reporting
Progress Software Corporation
9.8
1%
Jul 24Unsafe Deserialization Vulnerability
CVE-2024-6327
TR
Telerik Report Server
Progress Software Corporation
9.8
2%
Jul 24Progress Telerik Report Server Deserialization
CVE-2024-4358
In wildKEV
TR
Telerik Report Server
Progress Software Corporation
9.8
97%
May 29Registration Authentication Bypass Vulnerability
CVE-2023-40044
RansomwareIn wildKEV
WS
WS_FTP Server
Progress Software Corporation
8.8
90%
Sep 27WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability