progress software corporation
Latest CVEs
The 15 most recently published vulnerabilities affecting progress software corporation.
- CVE-2026-4670Improper Authentication vulnerability in Progress MOVEit Automation9.8
- CVE-2026-2701RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)9.1
- CVE-2026-2699EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)9.8
- CVE-2025-13147External Service Interaction (DNS)5.3
- CVE-2025-10932AS2 module allows uncontrolled file uploads8.2
- CVE-2025-6724Chef Automate SQL Injection Vulnerability8.8
- CVE-2025-7388Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface8.4
- CVE-2025-6725Cross-Site Scripting (XSS) in PdfViewer5.4
- CVE-2025-2572WhatsUp Gold NmConfigurationManager.exe database manipulation vulnerability5.6
- CVE-2025-1968Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay Attacks).This iss...7.7
- CVE-2025-1758Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above4.3
- CVE-2024-6097Absolute Path Traversal Vulnerability5.3
- CVE-2024-56135Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4
- CVE-2024-56134Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4
- CVE-2024-56133Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.8.4