Skip to content
OpenAdvisories

Vendor

Progress

56 known vulnerabilities.

Products

MOVEit Transfer 30 ShareFile Storage Zones Controller 9 LoadMaster 9 OpenEdge 4 DataDirect Connect for JDBC for Amazon Redshift 2 DataDirect Connect for JDBC for Apache Cassandra 2 DataDirect Connect for JDBC for Hive 2 DataDirect Connect for JDBC for Apache Impala 2 DataDirect Connect for JDBC for Apache SparkSQL 2 DataDirect Connect for JDBC Autonomous REST Connector 2 DataDirect Connect for JDBC for DB2 2 DataDirect Connect for JDBC for Google Analytics 4 2 DataDirect Connect for JDBC for Google BigQuery 2 DataDirect Connect for JDBC for Greenplum 2 DataDirect Connect for JDBC for Informix 2 DataDirect Connect for JDBC for Microsoft Dynamics 365 2 DataDirect Connect for JDBC for Microsoft SQLServer 2 DataDirect Connect for JDBC for Microsoft Sharepoint 2 DataDirect Connect for JDBC for MongoDB 2 DataDirect Connect for JDBC for MySQL 2 DataDirect Connect for JDBC for Oracle Database 2 DataDirect Connect for JDBC for Oracle Eloqua 2 DataDirect Connect for JDBC for Oracle Sales Cloud 2 DataDirect Connect for JDBC for Oracle Service Cloud 2 DataDirect Connect for JDBC for PostgreSQL 2 DataDirect Connect for JDBC for Progress OpenEdge 2 DataDirect Connect for JDBC for Salesforce 2 DataDirect Connect for JDBC for SAP HANA 2 DataDirect Connect for JDBC for SAP S/4 HANA 2 DataDirect Connect for JDBC for Sybase ASE 2 DataDirect Connect for JDBC for Snowflake 2 DataDirect Hybrid Data Pipeline Server 2 DataDirect Hybrid Data Pipeline JDBC Driver 2 DataDirect Hybrid Data Pipeline On Premises Connector 2 DataDirect Hybrid Data Pipeline Docker 2 DataDirect OpenAccess JDBC Driver 2 MOVEit Gateway 1 Sitefinity 1 MOVEit Automation 0 MOVEit 0
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.0
    CVE-2026-93694

    Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller

    In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a race condition allows the attacker to cause FileCopyService to consume attacker…

    Progress ShareFile Storage Zones Controller
  • Medium 6.5
    CVE-2026-93693

    Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller

    In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insufficient validation on queue service can be chained by a remote unauthenticated at…

    Progress ShareFile Storage Zones Controller
  • Medium 4.5
    CVE-2026-8650

    Authenticated Path Traversal allows MOVEit admins to view arbitrary system files

    Relative path traversal vulnerability in Progress MOVEit Transfer (Admin Settings module). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress MOVEit Transfer
  • Medium 6.4
    CVE-2026-8649

    Institution scope bypass vulnerability in custom reports

    Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer (Custom Reports modules). This issue affects MOVEit Transfer: before 2025.0.7, from 2025.1.0 before 2025.1.3.

    Progress MOVEit Transfer
  • Medium 5.3
    CVE-2025-13147

    External Service Interaction (DNS)

    Server-Side Request Forgery (SSRF) vulnerability in Progress MOVEit Transfer.This issue affects MOVEit Transfer: before 2024.1.8, from 2025.0.0 before 2025.0.4.

    Progress MOVEit Transfer
  • Medium 4.3
    CVE-2025-1758

    Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster…

    Progress LoadMaster
  • Medium 5.9
    CVE-2025-2324

    A MOVEit Transfer user configured as a Shared Account can gain unintended List permissions on a folder

    Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2…

    Progress MOVEit Transfer
  • Medium 6.8
    CVE-2024-11627

    : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sit…

    Progress Sitefinity