Vulnerabilidades em Progress Software Corporation

132 resultados
Análise Vexday

Com 4,65% das CVEs catalogadas confirmadas no CISA KEV, a Progress Software Corporation apresenta uma taxa de exploração ativa 10,3 vezes acima da média geral do catálogo, sinalizando que vulnerabilidades nesse ecossistema atraem atenção consistente de agentes maliciosos. Das 86 CVEs registradas, 19 são de severidade crítica e 5 contam com prova de conceito pública, o que amplia a superfície de risco para organizações que não mantêm ciclos ágeis de atualização. O pior caso ativo hoje é o CVE-2024-4885, com EPSS de 0,9929 — valor extremamente elevado que indica altíssima probabilidade de exploração —, exigindo atenção prioritária de equipes de resposta. O tipo de falha mais recorrente (CWE-79) aponta para problemas persistentes de sanitização de saída, aspecto que deve ser considerado em revisões de configuração e controles de segurança em camada de aplicação.

CVE-2026-85972HIGHImproper Kerberos server verification in Progress MarkLogic ServerEPSS 0.3%CVE-2026-85949HIGHSensitive information exposure in Progress MarkLogic Server trace logsEPSS 0.3%CVE-2026-85962HIGHImproper authentication in Progress MarkLogic Server SAML processingEPSS 0.3%CVE-2024-11625HIGHInformation Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from EPSS 0.3%CVE-2026-85966HIGHExposure of sensitive information in Progress MarkLogic ServerEPSS 0.3%CVE-2024-4200HIGHProgress Telerik Reporting Local Deserialization VulnerabilityEPSS 0.3%CVE-2023-42658HIGHInSpec Archive Command Vulnerable to Maliciously Crafted ProfileEPSS 0.3%CVE-2024-9825MEDIUMThe Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access tokenEPSS 0.3%CVE-2024-3543MEDIUMLoadMaster Reversible Password Encryption AlgorithmEPSS 0.3%CVE-2026-9191CRITICALInsufficient isolation of user-supplied code in Progress MarkLogic ServerEPSS 0.3%CVE-2024-4202HIGHProgress Telerik Reporting Local Instantiation VulnerabilityEPSS 0.3%CVE-2026-85968HIGHOut-of-bounds read in Progress MarkLogic ServerEPSS 0.3%CVE-2026-85970HIGHImproper XML external entity restriction in Progress MarkLogic ServerEPSS 0.3%CVE-2026-85954HIGHImproper privilege management in Progress MarkLogic Server higher-order XQuery functionsEPSS 0.3%CVE-2025-2572MEDIUMWhatsUp Gold NmConfigurationManager.exe database manipulation vulnerabilityEPSS 0.3%CVE-2026-65938MEDIUMWhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.EPSS 0.3%CVE-2026-85952HIGHServer-side request forgery in Progress MarkLogic Server Linux cloud deploymentsEPSS 0.2%CVE-2026-85951HIGHServer-side request forgery in Progress MarkLogic Server Azure deploymentsEPSS 0.2%CVE-2026-85969HIGHOut-of-bounds write in Progress MarkLogic ServerEPSS 0.2%CVE-2026-85965HIGHUse-after-free in Progress MarkLogic Server JavaScript engine integrationEPSS 0.2%