Product by Progress Software Corporation

    Openedge

    5 known vulnerabilities in Openedge (Progress Software Corporation), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Openedge (Progress Software Corporation)
    HighCVE-2025-7388

    Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface

    8.4
    CriticalCVE-2023-40051

    Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal

    also in 1 other product

    9.1
    CriticalCVE-2025-8095

    Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge

    —
    HighCVE-2025-7389

    Unauthorized Arbitrary File Read via RMI in AdminServer Interface

    —
    HighCVE-2023-40052

    Progress Application Server (PAS) for OpenEdge Denial of Service

    also in 1 other product

    7.5

    All products by Progress Software Corporation