Vulnerabilities in Progress Software

147 results
CVE-2024-2291MEDIUMMOVEit Transfer Logging Bypass VulnerabilityEPSS 0.4%CVE-2024-11629HIGHTelerik Document Processing RTF Export of Arbitrary File PathEPSS 0.4%CVE-2025-10239HIGHUnintended command execution via troubleshooting scripts in Progress FlowmonEPSS 0.4%CVE-2025-6724HIGHChef Automate SQL Injection VulnerabilityEPSS 0.4%CVE-2026-118036HIGHUncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringEPSS 0.4%CVE-2026-8488MEDIUMAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationEPSS 0.4%CVE-2026-13189HIGHSpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.4%CVE-2026-90869HIGHPre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerEPSS 0.4%CVE-2026-14932MEDIUMUnauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChartEPSS 0.4%CVE-2026-84294HIGHInformation Disclosure in Ad Hoc Transfer in Progress WS_FTP ServerEPSS 0.4%CVE-2026-7201HIGHCWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress SitefinityEPSS 0.3%CVE-2026-8485MEDIUMUncontrolled Memory Allocation vulnerability in Progress Software MOVEit AutomationEPSS 0.3%CVE-2026-13187HIGHDialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.3%CVE-2026-84296MEDIUMSSH Multi-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.3%CVE-2026-8079HIGHUnintended limited set of actions with elevated privileges may be performed during PDF generation in Progress FlowmonEPSS 0.3%CVE-2025-10240HIGHPossibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web applicationEPSS 0.3%CVE-2026-7313HIGHCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityEPSS 0.3%CVE-2025-0556HIGHTelerik Report Server Clear Text Transmission of Agent CommandsEPSS 0.3%CVE-2026-13184HIGHRadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.3%CVE-2026-90861MEDIUMPassword Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP ServerEPSS 0.3%