Vulnerabilidades em Progress Software Corporation

101 resultados
Análise Vexday

Com 4,65% das CVEs catalogadas confirmadas no CISA KEV, a Progress Software Corporation apresenta uma taxa de exploração ativa 10,3 vezes acima da média geral do catálogo, sinalizando que vulnerabilidades nesse ecossistema atraem atenção consistente de agentes maliciosos. Das 86 CVEs registradas, 19 são de severidade crítica e 5 contam com prova de conceito pública, o que amplia a superfície de risco para organizações que não mantêm ciclos ágeis de atualização. O pior caso ativo hoje é o CVE-2024-4885, com EPSS de 0,9929 — valor extremamente elevado que indica altíssima probabilidade de exploração —, exigindo atenção prioritária de equipes de resposta. O tipo de falha mais recorrente (CWE-79) aponta para problemas persistentes de sanitização de saída, aspecto que deve ser considerado em revisões de configuração e controles de segurança em camada de aplicação.

CVE-2026-65941HIGHWhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.EPSS 0.4%CVE-2024-4561MEDIUMWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconControllerEPSS 0.4%CVE-2026-9190CRITICALHTTP request smuggling in Progress MarkLogic ServerEPSS 0.4%CVE-2024-1801HIGHProgress Telerik Reporting Local Deserialization VulnerabilityEPSS 0.4%CVE-2024-9999MEDIUMMulti-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.4%CVE-2023-40047HIGHWS_FTP Server Stored Cross-Site Scripting VulnerabilityEPSS 0.4%CVE-2024-1636HIGHPotential Cross-Site Scripting (XSS) in the page editing areaEPSS 0.4%CVE-2024-4882MEDIUMURL Redirection to Arbitrary Site Exists in SitefinityEPSS 0.4%CVE-2024-3544HIGHLoadMaster Hardcoded SSH KeyEPSS 0.4%CVE-2023-6784MEDIUMPotential Use of the Sitefinity System for Distribution of Phishing EmailsEPSS 0.4%CVE-2024-4562MEDIUMWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsEPSS 0.4%CVE-2026-7329CRITICALPrivilege escalation in Progress MarkLogic Server REST query interfacesEPSS 0.4%CVE-2024-7745MEDIUMMulti-Factor Authentication Bypass in Progress WS_FTP ServerEPSS 0.4%CVE-2024-11626HIGHImproper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerabilitEPSS 0.4%CVE-2023-40048MEDIUMWS_FTP Server Cross-Site Request Forgery (CSRF) VulnerabilityEPSS 0.4%CVE-2024-7294HIGHUncontrolled resource consumption of anonymous endpointsEPSS 0.3%CVE-2024-7292HIGHAccount Controller allows high count of login attemptsEPSS 0.3%CVE-2024-7293HIGHPassword policy for new users is not strong enoughEPSS 0.3%CVE-2025-7389HIGHUnauthorized Arbitrary File Read via RMI in AdminServer InterfaceEPSS 0.3%CVE-2025-1968HIGHInsufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allEPSS 0.3%