Vulnerabilities in Progress Software Corporation
132 resultsCVE-2023-42660HIGHMOVEit Transfer Machine Interface SQL InjectionEPSS 0.7%CVE-2023-6218HIGHMOVEit Transfer Group Admin Privilege EscalationEPSS 0.7%CVE-2024-7744MEDIUMImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP ServerEPSS 0.7%CVE-2026-65941CRITICALWhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.EPSS 0.7%CVE-2023-40043HIGHMOVEit Transfer System Administrator SQL InjectionEPSS 0.7%CVE-2026-9195CRITICALCross-site scripting in Progress MarkLogic Server Query ConsoleEPSS 0.7%CVE-2024-7763CRITICALWhatsUp Gold getReport Missing Authentication Authentication Bypass VulnerabilityEPSS 0.6%CVE-2026-85955CRITICALImproper privilege management in Progress MarkLogic Server xdmp:eval-inEPSS 0.6%CVE-2026-7329CRITICALPrivilege escalation in Progress MarkLogic Server REST query interfacesEPSS 0.6%CVE-2023-40052HIGHProgress Application Server (PAS) for OpenEdge Denial of ServiceEPSS 0.6%CVE-2023-40051CRITICALProgress Application Server (PAS) for OpenEdge File Upload via Directory TraversalEPSS 0.6%CVE-2023-6368MEDIUMWhatsUp Gold Unauthenticated Access to an API EndpointEPSS 0.6%CVE-2023-42656MEDIUMMOVEit Transfer Reflected XSSEPSS 0.6%CVE-2024-0396HIGHMissing Server-Side Input Validation in HTTP ParameterEPSS 0.5%CVE-2024-5015HIGHWhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure VulnerabilityEPSS 0.5%CVE-2024-6097MEDIUMAbsolute Path Traversal VulnerabilityEPSS 0.5%CVE-2023-6365HIGHWhatsUp Gold Stored Cross-Site Scripting (XSS) via Device GroupsEPSS 0.5%CVE-2023-6364HIGHWhatsUp Gold Stored Cross-Site Scripting (XSS) via DashboardEPSS 0.5%CVE-2023-6367HIGHWhatsUp Gold Stored Cross-Site Scripting (XSS) via RolesEPSS 0.5%CVE-2023-6366HIGHWhatsUp Gold Stored Cross-Site Scripting (XSS) via Alert CenterEPSS 0.5%