Vulnerabilities in Progress Software Corporation

132 results
CVE-2026-85972HIGHImproper Kerberos server verification in Progress MarkLogic ServerEPSS 0.3%CVE-2026-85949HIGHSensitive information exposure in Progress MarkLogic Server trace logsEPSS 0.3%CVE-2026-85962HIGHImproper authentication in Progress MarkLogic Server SAML processingEPSS 0.3%CVE-2024-11625HIGHInformation Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from EPSS 0.3%CVE-2026-85966HIGHExposure of sensitive information in Progress MarkLogic ServerEPSS 0.3%CVE-2024-4200HIGHProgress Telerik Reporting Local Deserialization VulnerabilityEPSS 0.3%CVE-2023-42658HIGHInSpec Archive Command Vulnerable to Maliciously Crafted ProfileEPSS 0.3%CVE-2024-9825MEDIUMThe Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access tokenEPSS 0.3%CVE-2024-3543MEDIUMLoadMaster Reversible Password Encryption AlgorithmEPSS 0.3%CVE-2026-9191CRITICALInsufficient isolation of user-supplied code in Progress MarkLogic ServerEPSS 0.3%CVE-2024-4202HIGHProgress Telerik Reporting Local Instantiation VulnerabilityEPSS 0.3%CVE-2026-85968HIGHOut-of-bounds read in Progress MarkLogic ServerEPSS 0.3%CVE-2026-85970HIGHImproper XML external entity restriction in Progress MarkLogic ServerEPSS 0.3%CVE-2026-85954HIGHImproper privilege management in Progress MarkLogic Server higher-order XQuery functionsEPSS 0.3%CVE-2025-2572MEDIUMWhatsUp Gold NmConfigurationManager.exe database manipulation vulnerabilityEPSS 0.3%CVE-2026-65938MEDIUMWhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.EPSS 0.3%CVE-2026-85952HIGHServer-side request forgery in Progress MarkLogic Server Linux cloud deploymentsEPSS 0.2%CVE-2026-85951HIGHServer-side request forgery in Progress MarkLogic Server Azure deploymentsEPSS 0.2%CVE-2026-85969HIGHOut-of-bounds write in Progress MarkLogic ServerEPSS 0.2%CVE-2026-85965HIGHUse-after-free in Progress MarkLogic Server JavaScript engine integrationEPSS 0.2%