Vulnerabilidades en Progress Software Corporation
132 resultadosCVE-2026-85959HIGHInsufficient authentication logging in Progress MarkLogic ServerEPSS 0.4%CVE-2026-85956CRITICALImproper privilege management in Progress MarkLogic Server backup and restore operationsEPSS 0.4%CVE-2026-7327HIGHPrivilege escalation in Progress MarkLogic Server REST API document processingEPSS 0.4%CVE-2024-4882MEDIUMURL Redirection to Arbitrary Site Exists in SitefinityEPSS 0.4%CVE-2023-6784MEDIUMPotential Use of the Sitefinity System for Distribution of Phishing EmailsEPSS 0.4%CVE-2026-65939MEDIUMWhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.EPSS 0.4%CVE-2024-3544HIGHLoadMaster Hardcoded SSH KeyEPSS 0.4%CVE-2024-4562MEDIUMWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsEPSS 0.4%CVE-2026-85953HIGHPath traversal and privilege management flaws in Progress MarkLogic Server InfoStudioEPSS 0.4%CVE-2024-7745MEDIUMMulti-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.4%CVE-2026-85958HIGHImproper OAuth token validation in Progress MarkLogic ServerEPSS 0.4%CVE-2024-11626HIGHImproper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerabilitEPSS 0.4%CVE-2026-65940MEDIUMWhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.EPSS 0.4%CVE-2026-9203HIGHServer-side request forgery in Progress MarkLogic ServerEPSS 0.3%CVE-2024-7294HIGHUncontrolled resource consumption of anonymous endpointsEPSS 0.3%CVE-2024-7292HIGHAccount Controller allows high count of login attemptsEPSS 0.3%CVE-2024-7293HIGHPassword policy for new users is not strong enoughEPSS 0.3%CVE-2026-85950HIGHImproper privilege management in Progress MarkLogic Server REST extensionsEPSS 0.3%CVE-2025-1968HIGHInsufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allEPSS 0.3%CVE-2025-7389HIGHUnauthorized Arbitrary File Read via RMI in AdminServer InterfaceEPSS 0.3%