OP
Product
OpenEdge
12
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 2Low 0
Watch
Add OpenEdge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40051 | 9.9 | Jan 18 | This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker… Affected: 11.7 before 11.7.18; 12.2 before 12.2.13 |
| CVE-2024-1403 | 9.8 | Feb 27 | In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has… Affected: before 11.7.19; 11.8 before 12.2.14; 12.3 before 12.8.1 |
| CVE-2015-9245 | 9.8 | Oct 31 | Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute… Affected: 10.2a; 10.2b; 10.2b07; 10.2b08; 11.0; 11.1; +4 more |
| CVE-2024-7345 | 9.6 | Sep 3 | Direct local client connections to MS Agents can bypass authentication Affected: 11.7.0 through 11.7.19; 12.2.0 through 12.2.14 |
| CVE-2023-34203 | 8.8 | Jun 23 | In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change… Affected: before 11.7.16; 12.0 before 12.2.12; 12.3 before 12.7 |
| CVE-2022-29849 | 7.8 | May 2 | In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation Affected: 11.7 before 11.7.14; 12.0.0 before 12.2.9 |
| CVE-2023-40052 | 7.5 | Jan 18 | This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An… Affected: 11.7 before 11.7.18; 12.2 before 12.2.13 |
| CVE-2024-7654 | 6.1 | Sep 3 | Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service Affected: 11.7.0 before 11.7.19; 12.2.0 before 12.2.15; 12.8.0 before 12.8.2 |
| CVE-2024-7346 | 4.8 | Sep 3 | Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation Affected: 11.7.0 through 11.7.19; 12.2.0 through 12.2.14 |
| CVE-2014-8555 | – | Nov 12 | Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a Affected: 11.2 |
| CVE-2007-2417 | – | Jul 15 | Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0,… Affected: 10.1a; 10.1b |
| CVE-2007-3491 | – | Jun 29 | Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP… Affected: 9.1e; 10.1a; 10.1b |
Showing 12