Vulnerabilities in Progress
56 resultsCVE-2024-7345HIGHDirect local client connections to MS Agents can bypass authenticationEPSS 0.6%CVE-2024-6658HIGHImproper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.EPSS 0.6%CVE-2026-8801LOWFile Extension Restriction Bypass in MOVEit TransferEPSS 0.5%CVE-2026-89068HIGHMOVEit Transfer Authentication bypass in LDAP sign-onEPSS 0.5%CVE-2026-89067HIGHMOVEit Transfer Secure Messaging Authentication BypassEPSS 0.5%CVE-2026-15724HIGHPath traversal in Progress ShareFile Storage Zones Controller (SZC)EPSS 0.5%CVE-2026-89071HIGHMOVEit Transfer LDAP injection in certificate-based authenticationEPSS 0.5%CVE-2026-89076HIGHMOVEit Transfer SQL injection in custom reportingEPSS 0.5%CVE-2026-10699HIGHMemory leak in SFTP service can result in a denial of service in MOVEit TransferEPSS 0.5%CVE-2025-10932HIGHAS2 module allows uncontrolled file uploadsEPSS 0.5%CVE-2026-89074HIGHMOVEit Transfer Email MFA BypassEPSS 0.5%CVE-2026-89077HIGHMOVEit Transfer Identity validation flaw in SFTP authenticationEPSS 0.5%CVE-2026-8649MEDIUMInstitution scope bypass vulnerability in custom reportsEPSS 0.5%CVE-2026-89070HIGHMOVEit Transfer OIDC Authentication Replay VulnerabilityEPSS 0.4%CVE-2026-89069HIGHMOVEit Transfer Stored XSS Vulnerability in Ad Hoc PackagesEPSS 0.4%CVE-2026-11903HIGHStored XSS in MOVEit Transfer Ad Hoc moduleEPSS 0.4%CVE-2026-89073HIGHMOVEit Transfer Access restriction bypass in OAuth authenticationEPSS 0.4%CVE-2026-15966HIGHImproper CORS handling in MOVEit TransferEPSS 0.4%CVE-2026-15967HIGHMOVEit Transfer refresh-token processing does not enforce updated account restrictionsEPSS 0.4%CVE-2026-8800LOWCross-Org External Token Metadata accessible to AuditUser roleEPSS 0.4%