Skip to content
OpenAdvisories

Vendor

Progress Software

285 known vulnerabilities.

Products

WhatsUp Gold 42 MarkLogic Server 41 WS_FTP Server 32 Telerik UI for ASP.NET AJAX 19 LoadMaster 17 Kendo UI for jQuery 15 Sitefinity 12 Telerik Report Server 12 Telerik Reporting 10 Object Scale Connection Manager 10 MOVEit WAF 10 Telerik Document Processing Libraries 9 MOVEit Automation 7 Flowmon 7 MOVEit Transfer 7 KendoReact 6 ECS Connections Manager 5 Telerik UI for WPF 5 ECS Connection Manager 5 OpenEdge 5 Chef Automate 4 Kendo UI for Angular 4 Progress® Telerik® Fiddler® Classic 4 Flowmon ADS 4 Progress® Telerik® Fiddler® Everywhere 3 Telerik UI for WinForms 3 Kendo UI for Vue 3 Chef Inspec 2 Hybrid Data Pipeline 2 Telerik UI for ASP.NET MVC 1 Telerik UI for ASP.NET Core 1 Telerik UI for Blazor 1 Autonomous REST Connector GenAI Agents 1 Chef Habitat Builder 1 Telerik JustDecompile 1 Telerik KendoReact 1 Progress® Telerik® Reporting 1 Telerik UI for WinUI 1 Telerik Test Studio 1 Fiddler Download & Setup Skill 1
All Critical High Medium Low Exploited only Public exploit

285 results · Feed

  • Critical 9.9
    CVE-2023-42657 EPSS 16%

    WS_FTP Server Directory Traversal

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered.  An attacker could leverage this vulnerability to perform file operations (delete, rename, rmdir, mkdir) on files and folders outside of their authorized W…

    Progress Software WS_FTP Server
  • Critical 10.0
    CVE-2023-40044 Exploited · Ransomware Public exploit EPSS 90%

    WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

    Progress Software WS_FTP Server
    KEV Oct 5, 2023
  • Medium 6.1
    CVE-2023-42656

    MOVEit Transfer Reflected XSS

    In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a reflected cross-site scripting (XSS) vulnerability has been identified in MOVEit Transfer's web interface.  An attacker could cr…

    Progress Software MOVEit Transfer
  • High 7.2
    CVE-2023-40043

    MOVEit Transfer System Administrator SQL Injection

    In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer web interface that could allow a MOVEit system administra…

    Progress Software MOVEit Transfer
  • High 8.8
    CVE-2023-42660

    MOVEit Transfer Machine Interface SQL Injection

    In Progress MOVEit Transfer versions released before 2021.1.8 (13.1.8), 2022.0.8 (14.0.8), 2022.1.9 (14.1.9), 2023.0.6 (15.0.6), a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attac…

    Progress Software MOVEit Transfer