Vendor
Progress Software Corporation
132 known vulnerabilities in products by Progress Software Corporation, 4 of them actively exploited (CISA KEV).
Key figures
132
Vulnerabilities
4
Actively exploited (KEV)
2
Used by ransomware
32
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-6670 | WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability In CISA KEVRansomwarealso in 1 other product | 9.8 | |
| Critical | CVE-2023-40044 | WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability In CISA KEVRansomwarealso in 1 other product | 10.0 | |
| Critical | CVE-2024-4885 | WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2024-4358 | Registration Authentication Bypass Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2024-46909 | WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2024-4883 | WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2024-1800 | Progress Telerik Report Server Deserialization | 9.9 | |
| Critical | CVE-2024-4884 | WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2024-6671 | WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability | 9.8 | |
| Critical | CVE-2024-8785 | WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability | 9.8 | |
| High | CVE-2024-46906 | WhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| Critical | CVE-2023-42657 | WS_FTP Server Directory Traversal | 9.9 | |
| Critical | CVE-2024-12106 | Progress Software WhatsUp Gold: Missing Authentication for Critical Function | 9.4 | |
| Critical | CVE-2024-12108 | WhatsUp Gold - Public API signing key rotation issue | 9.6 | |
| High | CVE-2024-5008 | WhatsUp Gold APM Unrestricted File Upload Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-5009 | WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability | 8.4 | |
| High | CVE-2024-5010 | WhatsUp Gold TestController multiple information disclosure vulnerabilities | 7.5 | |
| High | CVE-2024-5011 | WhatsUp Gold TestController Chart denial of service vulnerability | 7.5 | |
| High | CVE-2024-5016 | WhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution Vulnerability | 7.2 | |
| Medium | CVE-2024-12105 | WhatsUp Gold - SnmpExtendedActiveMonitor path traversal | 6.5 | |
| Critical | CVE-2024-6327 | Progress Telerik Report Server Deserialization | 9.9 | |
| High | CVE-2024-46905 | WhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2024-46908 | WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| High | CVE-2024-46907 | WhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation Vulnerability | 8.8 | |
| Critical | CVE-2026-9192 | Authentication bypass in Progress MarkLogic Server ODBC App Server | 9.8 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
Products
| Whatsup Gold | 42 | 2 |
| Marklogic Server | 41 | 0 |
| Ws FTP Server | 11 | 1 |
| Sitefinity | 7 | 0 |
| Telerik Report Server | 7 | 1 |
| Moveit Transfer | 6 | 0 |
| Openedge | 5 | 0 |
| Telerik Reporting | 5 | 0 |