Vulnerabilities in Progress Software

147 results
CVE-2026-13190HIGHPersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.5%CVE-2026-18672HIGHRadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.5%CVE-2026-13182HIGHRadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.5%CVE-2026-13183HIGHRadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.5%CVE-2026-90864CRITICALHost Administrator Path Containment Bypass in Progress WS_FTP ServerEPSS 0.5%CVE-2024-7576HIGHProgress UI for WPF format provider unsafe deserialization vulnerabilityEPSS 0.5%CVE-2025-13774HIGHSQL injection leading to privilege escalation in Progress Flowmon ADSEPSS 0.5%CVE-2026-7198CRITICALCWE-284: Improper Access Control in web services in Progress SitefinityEPSS 0.4%CVE-2026-7312CRITICALCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityEPSS 0.4%CVE-2026-7195HIGHCWE-20: Improper Input Validation in web services in Progress SitefinityEPSS 0.4%CVE-2026-14865MEDIUMXXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAXEPSS 0.4%CVE-2024-4837MEDIUMTrust Boundary Violation VulnerabilityEPSS 0.4%CVE-2024-8049MEDIUMTelerik Document Processing Improper Handling of Memory ResourcesEPSS 0.4%CVE-2026-9272HIGHPossibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADSEPSS 0.4%CVE-2026-3692HIGHUnintended command execution during report generation in Progress FlowmonEPSS 0.4%CVE-2026-13192MEDIUMRadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.4%CVE-2025-0332HIGHProgress UI for WinForms decompression path traversal vulnerabilityEPSS 0.4%CVE-2026-90867HIGHImproper Access Control of Web Admin Console in Progress WS_FTP ServerEPSS 0.4%CVE-2026-8486MEDIUMAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationEPSS 0.4%CVE-2025-6505HIGHUnauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on LinuxEPSS 0.4%