Progress vulnerabilities

Products

• Whatsup Gold 62
• Moveit Transfer 49
• Moveit Transfer 38
• Ws Ftp Server 28
• Loadmaster 27
• Sitefinity 24
• Telerik Ui For Asp.net Ajax 21
• Telerik Reporting 16
• Kendo Ui 14
• Ecs Connection Manager 12
• Openedge 12
• Connection Manager For Objectscale 11
• Marklogic Server 10
• Sharefile Storage Zones Controller 9
• Telerik Report Server 9
• Moveit Automation 8
• Multi-tenant Loadmaster 8
• Moveit Web Application Firewall 7
• Sharefile Storage Zones Controller 6
• Progress 5
• Sitefinity Cms 5
• Whatsupgold 5
• Flowmon 4
• Flowmon Anomaly Detection System 4
• Telerik Document Processing Libraries 3
• Telerik Ui For Winforms 3
• Datadirect Connect For Jdbc Autonomous Rest Connector 2
• Datadirect Connect For Jdbc For Amazon Redshift 2
• Datadirect Connect For Jdbc For Apache Cassandra 2
• Datadirect Connect For Jdbc For Apache Impala 2
• Datadirect Connect For Jdbc For Apache Sparksql 2
• Datadirect Connect For Jdbc For Db2 2
• Datadirect Connect For Jdbc For Google Analytics 4 2
• Datadirect Connect For Jdbc For Google Bigquery 2
• Datadirect Connect For Jdbc For Greenplum 2
• Datadirect Connect For Jdbc For Hive 2
• Datadirect Connect For Jdbc For Informix 2
• Datadirect Connect For Jdbc For Microsoft Dynamics 365 2
• Datadirect Connect For Jdbc For Microsoft Sharepoint 2
• Datadirect Connect For Jdbc For Microsoft Sqlserver 2

Show 27 moreShow less

• Datadirect Connect For Jdbc For Mongodb 2
• Datadirect Connect For Jdbc For Mysql 2
• Datadirect Connect For Jdbc For Oracle Database 2
• Datadirect Connect For Jdbc For Oracle Eloqua 2
• Datadirect Connect For Jdbc For Oracle Sales Cloud 2
• Datadirect Connect For Jdbc For Oracle Service Cloud 2
• Datadirect Connect For Jdbc For Postgresql 2
• Datadirect Connect For Jdbc For Progress Openedge 2
• Datadirect Connect For Jdbc For Salesforce 2
• Datadirect Connect For Jdbc For Sap Hana 2
• Datadirect Connect For Jdbc For Sap S/4 Hana 2
• Datadirect Connect For Jdbc For Snowflake 2
• Datadirect Connect For Jdbc For Sybase Ase 2
• Datadirect Hybrid Data Pipeline Docker 2
• Datadirect Hybrid Data Pipeline Jdbc Driver 2
• Datadirect Hybrid Data Pipeline On Premises Connector 2
• Datadirect Hybrid Data Pipeline Server 2
• Datadirect Odbc Oracle Wire Protocol Driver 2
• Datadirect Openaccess Jdbc Driver 2
• Flowmon Os 2
• Hybrid Data Pipeline 2
• Ipswitch Ws Ftp Server 2
• Multi-tenant Hypervisor 2
• Openedge Innovation 2
• Webspeed 2
• Webspeed Messenger 2
• Whatsup Gold 2

Newest

• progress kendo ui, progress software kendo ui for jquery +1 more MDX and SOAP Injection in Kendo UI for jQuery CVE-2026-108116 7.5 HighOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar CVE-2026-106153 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery CVE-2026-106151 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-site Scripting (XSS) in Kendo UI for jQuery Menu CVE-2026-106149 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery CVE-2026-106148 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery CVE-2026-106147 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery CVE-2026-106161 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery CVE-2026-106160 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery CVE-2026-106159 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery CVE-2026-106158 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery CVE-2026-106157 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery CVE-2026-106162 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser CVE-2026-106163 6.5 MediumOctober 15, 2026
• progress moveit transfer MOVEit Transfer Identity validation flaw in SFTP authentication CVE-2026-89077 7.5 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer SQL injection in custom reporting CVE-2026-89076 7.2 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Local Disclosure of Session Information Vulnerability CVE-2026-89075 7.3 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Email MFA Bypass CVE-2026-89074 7.5 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Access restriction bypass in OAuth authentication CVE-2026-89073 7.5 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Authorization Flaw in Certificate Management CVE-2026-89072 7.5 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer LDAP injection in certificate-based authentication CVE-2026-89071 7.5 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer OIDC Authentication Replay Vulnerability CVE-2026-89070 7.5 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages CVE-2026-89069 8.0 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Authentication bypass in LDAP sign-on CVE-2026-89068 8.1 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Secure Messaging Authentication Bypass CVE-2026-89067 8.8 HighOctober 14, 2026
• progress moveit transfer MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation CVE-2026-87093 8.8 HighOctober 14, 2026
• progress sharefile storage zones controller Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService CVE-2026-93695 7.4 HighOctober 12, 2026
• progress sharefile storage zones controller Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller CVE-2026-93694 4.0 MediumOctober 12, 2026
• progress sharefile storage zones controller Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller CVE-2026-93693 6.5 MediumOctober 12, 2026
• progress sharefile storage zones controller Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller CVE-2026-16137 7.2 HighAugust 17, 2026
• progress sharefile storage zones controller Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service CVE-2026-16138 8.0 HighAugust 17, 2026
• progress sharefile storage zones controller Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution CVE-2026-16139 7.2 HighAugust 17, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. CVE-2026-65941 8.8 HighAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. CVE-2026-65940 6.8 MediumAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler. CVE-2026-65939 6.8 MediumAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. CVE-2026-65938 4.3 MediumAugust 12, 2026
• progress whatsup gold WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI CVE-2026-65937 8.0 HighAugust 12, 2026
• progress marklogic server Server-side request forgery in Progress MarkLogic Server CVE-2026-9203 8.5 HighAugust 5, 2026
• progress marklogic server Cross-site scripting in Progress MarkLogic Server Query Console CVE-2026-9195 9.3 CriticalAugust 5, 2026
• progress marklogic server Privilege escalation in Progress MarkLogic Server Hadoop integration CVE-2026-9193 9.9 CriticalAugust 5, 2026
• progress marklogic server Authentication bypass in Progress MarkLogic Server ODBC App Server CVE-2026-9192 9.8 CriticalAugust 5, 2026
• progress marklogic server HTTP request smuggling in Progress MarkLogic Server CVE-2026-9190 9.1 CriticalAugust 5, 2026
• progress marklogic server Privilege escalation in Progress MarkLogic Server REST document patch operation CVE-2026-8709 9.9 CriticalAugust 5, 2026
• progress marklogic server SAML authentication bypass in Progress MarkLogic Server CVE-2026-7557 9.1 CriticalAugust 5, 2026
• progress marklogic server Privilege escalation in Progress MarkLogic Server REST query interfaces CVE-2026-7329 9.9 CriticalAugust 5, 2026
• progress marklogic server Privilege escalation in Progress MarkLogic Server REST API document processing CVE-2026-7327 8.1 HighAugust 5, 2026
• progress marklogic server Cross-site request forgery in Progress MarkLogic Server Admin UI CVE-2026-7326 7.5 HighAugust 5, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +5 more +7 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API CVE-2026-59690 8.0 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root CVE-2026-59689 8.0 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality CVE-2026-59688 8.4 HighJuly 27, 2026
• progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 more Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface CVE-2026-59687 8.4 HighJuly 27, 2026
• Show olderLoading…