Skip to contentProgress vulnerabilities
Products
Show 7 moreShow less
Newest
- progress sharefile storage zones controllerEAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)CVE-2026-2699Public exploitEPSS 58.4%9.8 Critical
- progress software flowmon ads, progress flowmon anomaly detection system +1 morePossibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web applicationCVE-2026-25148.6 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 morePossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web applicationCVE-2026-25138.6 High
- progress telerik ui for asp.net ajaxInsufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-28785.3 Medium
- progress loadmaster, connection manager for objectscale*, ecs connection manager +2 more +4 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterCVE-2025-13447EPSS 27.2%8.4 High
- progress loadmaster, connection manager for objectscale, ecs connection manager +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterCVE-2025-13444EPSS 27.2%8.4 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 moreSQL injection leading to privilege escalation in Progress Flowmon ADSCVE-2025-137748.8 High
- progress moveit transferMOVEit Transfer REST API does not require current password in order to initiate the password change processCVE-2025-112353.7 Low
- progress moveit transferExternal Service Interaction (DNS)CVE-2025-131475.3 Medium
- progress datadirect connect for jdbc autonomous rest connector, datadirect connect for jdbc for amazon redshift, datadirect connect for jdbc for apache cassandra +29 more +31 moreImproper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect...CVE-2025-107038.6 High
- progress datadirect connect for jdbc autonomous rest connector, datadirect connect for jdbc for amazon redshift, datadirect connect for jdbc for apache cassandra +29 more +31 moreImproper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect...CVE-2025-107028.6 High
- progress moveit transferAS2 module allows uncontrolled file uploadsCVE-2025-109328.2 High
- progress hybrid data pipelineUnauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress...CVE-2025-65058.1 High
- progress hybrid data pipelinePossibilities of IP Spoofing via X-Forwarded-For (XFF) HeaderCVE-2025-65048.4 High
- progress telerik ui for asp.net ajaxUnsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAXCVE-2025-3600EPSS 26.3%7.5 High
- progress whatsup goldWhatsUp Gold NmConfigurationManager.exe database manipulation vulnerabilityCVE-2025-25725.6 Medium
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue...CVE-2025-17584.3 Medium
- progress moveit transferA MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folderCVE-2025-23245.9 Medium
- progress software corporation progress® telerik® reporting, progress telerik reporting +1 moreAbsolute Path Traversal VulnerabilityCVE-2024-60975.3 Medium
- progress software progress® telerik® document processing libraries, progress telerik document processing libraries +1 moreTelerik Document Processing RTF Export of Arbitrary File PathCVE-2024-116297.1 High
- progress kendo ui for vue, progress software progress® telerik® kendo ui for vue +1 morePrototype Pollution in Progress® Telerik® Kendo UI for VueCVE-2024-116284.1 Medium
- progress telerik document processing librariesTelerik Document Processing Path TraversalCVE-2024-113438.3 High
- progress kendoreact, progress software telerik kendoreact +1 morePrototype Pollution in Progress® Telerik® KendoReactCVE-2024-126294.1 Medium
- progress software progress® telerik® ui for winforms, progress telerik ui for winforms +1 moreProgress UI for WinForms decompression path traversal vulnerabilityCVE-2025-03327.8 High
- progress telerik report serverTelerik Report Server Clear Text Transmission of Agent CommandsCVE-2025-05568.8 High
- progress telerik ui for winuiImproper neutralization special element in hyperlinksCVE-2024-122517.8 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.CVE-2024-561358.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.CVE-2024-561348.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.CVE-2024-561338.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.CVE-2024-561328.4 High
- progress loadmaster, multi-tenant loadmaster +1 moreImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.CVE-2024-561318.4 High
- progress sitefinity: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation...CVE-2024-116276.8 Medium
- progress sitefinityImproper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation ...CVE-2024-116268.4 High
- progress sitefinityInformation Exposure Through an Error Message vulnerability in Progress Software Corporation...CVE-2024-116257.7 High
- progress whatsup goldWhatsUp Gold - SnmpExtendedActiveMonitor path traversalCVE-2024-12105EPSS 43.1%6.5 Medium
- progress whatsup goldWhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authenticationCVE-2024-121069.4 Critical
- progress whatsup goldWhatsUp Gold - Public API signing key rotation issueCVE-2024-121089.6 Critical
- progress whatsup goldWhatsUp Gold Registry Overwrite Remote Code Execution VulnerabilityCVE-2024-87859.8 Critical
- progress whatsup goldWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityCVE-2024-46909EPSS 48.9%9.8 Critical
- progress whatsup goldWhatsUp Gold GetOrderByClause SQL Injection Privilege Escalation VulnerabilityCVE-2024-469058.8 High
- progress whatsup goldWhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation VulnerabilityCVE-2024-46906EPSS 40.4%8.8 High
- progress whatsup goldWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityCVE-2024-469078.8 High
- progress whatsup goldWhatsUp Gold GetFilterCriteria SQL Injection Privilege Escalation VulnerabilityCVE-2024-469088.8 High
- progress telerik report serverHard-coded credentials used for temporary and cache data encryptionCVE-2024-72957.1 High
- progress telerik document processing librariesTelerik Document Processing Improper Handling of Memory ResourcesCVE-2024-80496.5 Medium
- progress telerik ui for winforms, progress software telerik ui for wpf versions +1 moreProgress UI for WinForms format provider unsafe deserialization vulnerabilityCVE-2024-100137.8 High
- progress whatsup goldWhatsUp Gold getReport Missing Authentication Authentication Bypass VulnerabilityCVE-2024-77639.8 Critical
- kemptechnologies loadmasterImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.CVE-2024-87558.4 High
- progress telerik report server, progress software telerik reporting +1 moreTelerik Report Server Insecure Type ResolutionCVE-2024-80159.1 Critical
- progress telerik report serverAccount Controller allows high count of login attemptsCVE-2024-72927.5 High
- Show moreLoading…