Product by Progress

    Progress OpenEdge

    12 known vulnerabilities in Progress OpenEdge (Progress), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Progress OpenEdge (Progress)
    CriticalCVE-2024-1403

    Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

    		10.0
    CriticalCVE-2015-9245

    Progress OpenEdge: security vulnerability

    		9.8
    HighCVE-2023-34203

    Progress OpenEdge: security vulnerability

    		8.8
    Not ratedCVE-2007-2417

    Progress OpenEdge: Heap-Based Buffer Overflow

    also in 2 other products

    		—
    Not ratedCVE-2014-8555

    Progress OpenEdge: Path Traversal

    		—
    CriticalCVE-2023-40051

    Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal

    also in 1 other product

    		9.1
    CriticalCVE-2024-7345

    Direct local client connections to MS Agents can bypass authentication

    		8.3
    HighCVE-2023-40052

    Progress Application Server (PAS) for OpenEdge Denial of Service

    also in 1 other product

    		7.5
    Not ratedCVE-2007-3491

    Progress OpenEdge: Buffer Overflow

    		—
    HighCVE-2024-7654

    Progress OpenEdge: Cross-site Scripting

    		8.3
    HighCVE-2022-29849

    Progress OpenEdge: Privilege Escalation

    		7.8
    HighCVE-2024-7346

    Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation

    		7.2

    All products by Progress