Skip to content
OpenAdvisories

Vendor

Progress

56 known vulnerabilities.

Products

MOVEit Transfer 30 ShareFile Storage Zones Controller 9 LoadMaster 9 OpenEdge 4 DataDirect Connect for JDBC for Amazon Redshift 2 DataDirect Connect for JDBC for Apache Cassandra 2 DataDirect Connect for JDBC for Hive 2 DataDirect Connect for JDBC for Apache Impala 2 DataDirect Connect for JDBC for Apache SparkSQL 2 DataDirect Connect for JDBC Autonomous REST Connector 2 DataDirect Connect for JDBC for DB2 2 DataDirect Connect for JDBC for Google Analytics 4 2 DataDirect Connect for JDBC for Google BigQuery 2 DataDirect Connect for JDBC for Greenplum 2 DataDirect Connect for JDBC for Informix 2 DataDirect Connect for JDBC for Microsoft Dynamics 365 2 DataDirect Connect for JDBC for Microsoft SQLServer 2 DataDirect Connect for JDBC for Microsoft Sharepoint 2 DataDirect Connect for JDBC for MongoDB 2 DataDirect Connect for JDBC for MySQL 2 DataDirect Connect for JDBC for Oracle Database 2 DataDirect Connect for JDBC for Oracle Eloqua 2 DataDirect Connect for JDBC for Oracle Sales Cloud 2 DataDirect Connect for JDBC for Oracle Service Cloud 2 DataDirect Connect for JDBC for PostgreSQL 2 DataDirect Connect for JDBC for Progress OpenEdge 2 DataDirect Connect for JDBC for Salesforce 2 DataDirect Connect for JDBC for SAP HANA 2 DataDirect Connect for JDBC for SAP S/4 HANA 2 DataDirect Connect for JDBC for Sybase ASE 2 DataDirect Connect for JDBC for Snowflake 2 DataDirect Hybrid Data Pipeline Server 2 DataDirect Hybrid Data Pipeline JDBC Driver 2 DataDirect Hybrid Data Pipeline On Premises Connector 2 DataDirect Hybrid Data Pipeline Docker 2 DataDirect OpenAccess JDBC Driver 2 MOVEit Gateway 1 Sitefinity 1 MOVEit Automation 0 MOVEit 0
All Critical High Medium Low Exploited only Public exploit

56 results · Feed

  • High 8.4
    CVE-2024-56135

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

    Progress LoadMaster
  • High 8.4
    CVE-2024-56134

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

    Progress LoadMaster
  • High 8.4
    CVE-2024-56133

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

    Progress LoadMaster
  • High 8.4
    CVE-2024-56132

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

    Progress LoadMaster
  • High 8.4
    CVE-2024-56131

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection. This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.…

    Progress LoadMaster
  • Medium 6.8
    CVE-2024-11627

    : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sit…

    Progress Sitefinity
  • High 8.4
    CVE-2024-8755

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.1 (inclusive)    From 7.2.49.0 to 7.2.54.12 (inclusive)    7.2…

    Progress LoadMaster
  • High 8.4
    CVE-2024-6658

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.

    Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.This issue affects:  Product Affected Versions LoadMaster From 7.2.55.0 to 7.2.60.0 (inclusive)    From 7.2.49.0 to 7.2.54.11 (inclusive)    7.2.4…

    Progress LoadMaster
  • Critical 10.0
    CVE-2024-7591 Public exploit EPSS 39%

    Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection

    Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above

    Progress LoadMaster
  • High 7.2
    CVE-2024-7346

    Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation

    Host name validation for TLS certificates is bypassed when the installed OpenEdge default certificates are used to perform the TLS handshake for a networked connection.  This has been corrected so that default certificates are no longer capable of overriding …

    Progress OpenEdge
  • High 8.3
    CVE-2024-7345

    Direct local client connections to MS Agents can bypass authentication

    Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platfor…

    Progress OpenEdge
  • High 8.3
    CVE-2024-7654

    Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service

    An ActiveMQ Discovery service was reachable by default from an OpenEdge Management installation when an OEE/OEM auto-discovery feature was activated.  Unauthorized access to the discovery service's UDP port allowed content injection into parts of the OEM web …

    Progress OpenEdge
  • High 7.3
    CVE-2024-6576

    MOVEit Transfer Privilege Escalation Vulnerability

    Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Privilege Escalation.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.12, from 2023.1.0 before 2023.1.7, from 2024.0.0 before 2024.0.3.

    Progress MOVEit Transfer
  • Critical 9.1
    CVE-2024-5806 Public exploit EPSS 81%

    MOVEit Transfer Authentication Bypass Vulnerability

    Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.

    Progress MOVEit Transfer
  • Critical 9.1
    CVE-2024-5805

    MOVEit Gateway Authentication Bypass Vulnerability

    Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.

    Progress MOVEit Gateway
  • Critical 10.0
    CVE-2024-1403 Public exploit

    Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

    In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a fa…

    Progress OpenEdge