Progress Software Corporation Openedge vulnerabilities

• progress software corporation openedge Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge CVE-2025-8095 9.1 CriticalApril 14, 2026
• progress software corporation openedge Unauthorized Arbitrary File Read via RMI in AdminServer Interface CVE-2025-7389 8.2 HighApril 14, 2026
• progress software corporation openedge Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface CVE-2025-7388 8.4 HighSeptember 4, 2025
• progress openedge Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation CVE-2024-7346 7.2 HighSeptember 3, 2024
• progress openedge Direct local client connections to MS Agents can bypass authentication CVE-2024-7345 8.3 HighSeptember 3, 2024
• progress openedge Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service CVE-2024-7654 8.3 HighSeptember 3, 2024
• progress openedge Authentication Bypass in OpenEdge Authentication Gateway and AdminServer CVE-2024-1403 Public exploit 10.0 CriticalFebruary 27, 2024
• progress openedge, openedge innovation +1 more Progress Application Server (PAS) for OpenEdge Denial of Service CVE-2023-40052 7.5 HighJanuary 18, 2024
• progress openedge, openedge innovation +1 more Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal CVE-2023-40051 9.1 CriticalJanuary 18, 2024