Progress Openedge vulnerabilities

• progress datadirect connect for jdbc autonomous rest connector, datadirect connect for jdbc for amazon redshift, datadirect connect for jdbc for apache cassandra +29 more +31 more Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect... CVE-2025-10703 8.6 HighNovember 19, 2025
• progress datadirect connect for jdbc autonomous rest connector, datadirect connect for jdbc for amazon redshift, datadirect connect for jdbc for apache cassandra +29 more +31 more Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect... CVE-2025-10702 8.6 HighNovember 19, 2025
• progress openedge Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation CVE-2024-7346 7.2 HighSeptember 3, 2024
• progress openedge Direct local client connections to MS Agents can bypass authentication CVE-2024-7345 8.3 HighSeptember 3, 2024
• progress openedge Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service CVE-2024-7654 8.3 HighSeptember 3, 2024
• progress openedge Authentication Bypass in OpenEdge Authentication Gateway and AdminServer CVE-2024-1403 Public exploit 10.0 CriticalFebruary 27, 2024
• progress openedge, openedge innovation +1 more Progress Application Server (PAS) for OpenEdge Denial of Service CVE-2023-40052 7.5 HighJanuary 18, 2024
• progress openedge, openedge innovation +1 more Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal CVE-2023-40051 9.1 CriticalJanuary 18, 2024
• progress openedge, openedge explorer, openedge management +2 more In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote... CVE-2023-34203 8.8 HighJune 23, 2023
• progress openedge In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the... CVE-2022-29849 7.8 HighMay 1, 2022
• progress openedge Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows... CVE-2015-9245 9.8 CriticalOctober 31, 2017
• progress openedge Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11... CVE-2014-8555 Public exploit 5.0 MediumNovember 12, 2014
• progress openedge, progress, rsa ace server +2 more Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x,... CVE-2007-2417 EPSS 16.2% 10.0 HighJuly 15, 2007
• progress openedge Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10... CVE-2007-3491 7.5 HighJune 29, 2007