PS
Vendor
Progress Software Corporation
47
CVEs
2
On KEV
31
New 30D
Products
MS9.9
MarkLogic Server
Progress Software Corporation
41 CVEs0 on KEV31 new
TR9.8
Telerik Report Server
Progress Software Corporation
1 CVEs1 on KEV0 new
WS8.8
WS_FTP Server
Progress Software Corporation
1 CVEs1 on KEV0 new
OP9.1
OpenEdge
Progress Software Corporation
2 CVEs0 on KEV0 new
SI5.3
Sitefinity
Progress Software Corporation
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-85976 | MS MarkLogic Server Progress Software Corporation | 5.4 | Oct 12 | HTTP response splitting in Progress MarkLogic Server Query Console |
| CVE-2026-85975 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Cleartext transmission in Progress MarkLogic Server Amazon S3 connections |
| CVE-2026-85974 | MS MarkLogic Server Progress Software Corporation | 7.4 | Oct 12 | Improper TLS hostname verification in Progress MarkLogic Server |
| CVE-2026-85973 | MS MarkLogic Server Progress Software Corporation | 7.4 | Oct 12 | Cleartext transmission in Progress MarkLogic Server cluster join operations |
| CVE-2026-85972 | MS MarkLogic Server Progress Software Corporation | 7.4 | Oct 12 | Improper Kerberos server verification in Progress MarkLogic Server |
| CVE-2026-85971 | MS MarkLogic Server Progress Software Corporation | 7.1 | Oct 12 | Incorrect log file permissions in Progress MarkLogic Server |
| CVE-2026-85970 | MS MarkLogic Server Progress Software Corporation | 7.1 | Oct 12 | Improper XML external entity restriction in Progress MarkLogic Server |
| CVE-2026-85969 | MS MarkLogic Server Progress Software Corporation | 7.1 | Oct 12 | Out-of-bounds write in Progress MarkLogic Server |
| CVE-2026-85968 | MS MarkLogic Server Progress Software Corporation | 7.1 | Oct 12 | Out-of-bounds read in Progress MarkLogic Server |
| CVE-2026-85967 | MS MarkLogic Server Progress Software Corporation | 6.1 | Oct 12 | Cross-site scripting in Progress MarkLogic Server |
| CVE-2026-85966 | MS MarkLogic Server Progress Software Corporation | 7.7 | Oct 12 | Exposure of sensitive information in Progress MarkLogic Server |
| CVE-2026-85965 | MS MarkLogic Server Progress Software Corporation | 8.0 | Oct 12 | Use-after-free in Progress MarkLogic Server JavaScript engine integration |
| CVE-2026-85964 | MS MarkLogic Server Progress Software Corporation | 7.7 | Oct 12 | Path traversal in Progress MarkLogic Server Query Console |
| CVE-2026-85963 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector |
| CVE-2026-85962 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Improper authentication in Progress MarkLogic Server SAML processing |
| CVE-2026-85961 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Sensitive information exposure in Progress MarkLogic Server Azure deployments |
| CVE-2026-85960 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Cross-site request forgery in Progress MarkLogic Server Query Console |
| CVE-2026-85959 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Insufficient authentication logging in Progress MarkLogic Server |
| CVE-2026-85958 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Improper OAuth token validation in Progress MarkLogic Server |
| CVE-2026-85957 | MS MarkLogic Server Progress Software Corporation | 7.5 | Oct 12 | Improper XML external entity restriction in Progress MarkLogic Server SAML processing |
| CVE-2026-85956 | MS MarkLogic Server Progress Software Corporation | 9.6 | Oct 12 | Improper privilege management in Progress MarkLogic Server backup and restore operations |
| CVE-2026-85955 | MS MarkLogic Server Progress Software Corporation | 9.9 | Oct 12 | Improper privilege management in Progress MarkLogic Server xdmp:eval-in |
| CVE-2026-85954 | MS MarkLogic Server Progress Software Corporation | 8.6 | Oct 12 | Improper privilege management in Progress MarkLogic Server higher-order XQuery functions |
| CVE-2026-85953 | MS MarkLogic Server Progress Software Corporation | 8.5 | Oct 12 | Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio |
| CVE-2026-85952 | MS MarkLogic Server Progress Software Corporation | 8.5 | Oct 12 | Server-side request forgery in Progress MarkLogic Server Linux cloud deployments |
| CVE-2026-85951 | MS MarkLogic Server Progress Software Corporation | 8.5 | Oct 12 | Server-side request forgery in Progress MarkLogic Server Azure deployments |
| CVE-2026-85950 | MS MarkLogic Server Progress Software Corporation | 8.4 | Oct 12 | Improper privilege management in Progress MarkLogic Server REST extensions |
| CVE-2026-85949 | MS MarkLogic Server Progress Software Corporation | 8.1 | Oct 12 | Sensitive information exposure in Progress MarkLogic Server trace logs |
| CVE-2026-85948 | MS MarkLogic Server Progress Software Corporation | 9.9 | Oct 12 | Improper privilege management in Progress MarkLogic Server Management API |
| CVE-2026-85947 | MS MarkLogic Server Progress Software Corporation | 9.9 | Oct 12 | Improper privilege management in Progress MarkLogic Server forest operations |
| CVE-2026-9191 | MS MarkLogic Server Progress Software Corporation | 9.6 | Oct 12 | Insufficient isolation of user-supplied code in Progress MarkLogic Server |
| CVE-2026-9203 | MS MarkLogic Server Progress Software Corporation | 8.5 | Aug 5 | Server-side request forgery in Progress MarkLogic Server |
| CVE-2026-9195 | MS MarkLogic Server Progress Software Corporation | 9.3 | Aug 5 | Cross-site scripting in Progress MarkLogic Server Query Console |
| CVE-2026-9193 | MS MarkLogic Server Progress Software Corporation | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server Hadoop integration |
| CVE-2026-9192 | MS MarkLogic Server Progress Software Corporation | 9.8 | Aug 5 | Authentication bypass in Progress MarkLogic Server ODBC App Server |
| CVE-2026-9190 | MS MarkLogic Server Progress Software Corporation | 9.1 | Aug 5 | HTTP request smuggling in Progress MarkLogic Server |
| CVE-2026-8709 | MS MarkLogic Server Progress Software Corporation | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST document patch operation |
| CVE-2026-7557 | MS MarkLogic Server Progress Software Corporation | 9.1 | Aug 5 | SAML authentication bypass in Progress MarkLogic Server |
| CVE-2026-7329 | MS MarkLogic Server Progress Software Corporation | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST query interfaces |
| CVE-2026-7327 | MS MarkLogic Server Progress Software Corporation | 8.1 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST API document processing |
| CVE-2026-7326 | MS MarkLogic Server Progress Software Corporation | 8.8 | Aug 5 | Cross-site request forgery in Progress MarkLogic Server Admin UI |
| CVE-2025-8095 | OP OpenEdge Progress Software Corporation | 9.1 | Apr 14 | Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge |
| CVE-2025-7389 | OP OpenEdge Progress Software Corporation | 8.2 | Apr 14 | Unauthorized Arbitrary File Read via RMI in AdminServer Interface |
| CVE-2024-11626 | SI Sitefinity Progress Software Corporation | 4.8 | Jan 7 | Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue… |
| CVE-2024-11625 | SI Sitefinity Progress Software Corporation | 5.3 | Jan 7 | Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200… |
| CVE-2024-4358 In wildKEV | TR Telerik Report Server Progress Software Corporation | 9.8 | May 29 | Registration Authentication Bypass Vulnerability |
| CVE-2023-40044 RansomwareIn wildKEV | WS WS_FTP Server Progress Software Corporation | 8.8 | Sep 27 | WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability |
