← Back

Progress

progress

301 CVEs • 49 products

Products (49)

Click to collapse
Toggle
Whatsup Gold
whatsup_gold
61 CVEs
Moveit Transfer
moveit_transfer
37 CVEs
Ws Ftp Server
ws_ftp_server
28 CVEs
Loadmaster
loadmaster
26 CVEs
Sitefinity
sitefinity
24 CVEs
Telerik Ui For Asp.net Ajax
telerik_ui_for_asp.net_ajax
21 CVEs
Telerik Reporting
telerik_reporting
14 CVEs
Openedge
openedge
12 CVEs
Connection Manager For Objectscale*
connection_manager_for_objectscale*
12 CVEs
Ecs Connection Manager
ecs_connection_manager
12 CVEs
Marklogic Server
marklogic_server
10 CVEs
Moveit Automation
moveit_automation
8 CVEs
Multi Tenant Loadmaster
multi-tenant_loadmaster
8 CVEs
Telerik Report Server
telerik_report_server
7 CVEs
Moveit Web Application Firewall
moveit_web_application_firewall
7 CVEs
Sharefile Storage Zones Controller
sharefile_storage_zones_controller
6 CVEs
Progress
progress
5 CVEs
Sitefinity Cms
sitefinity_cms
5 CVEs
Flowmon
flowmon
4 CVEs
Flowmon Anomaly Detection System
flowmon_anomaly_detection_system
4 CVEs
Telerik Ui For Winforms
telerik_ui_for_winforms
3 CVEs
Telerik Document Processing Libraries
telerik_document_processing_libraries
3 CVEs
Webspeed
webspeed
2 CVEs
Webspeed Messenger
webspeed_messenger
2 CVEs
Ipswitch Ws Ftp Server
ipswitch_ws_ftp_server
2 CVEs
Datadirect Odbc Oracle Wire Protocol Driver
datadirect_odbc_oracle_wire_protocol_driver
2 CVEs
Openedge Innovation
openedge_innovation
2 CVEs
Hybrid Data Pipeline
hybrid_data_pipeline
2 CVEs
Moveit Waf
moveit_waf
2 CVEs
Multi Tenant Hypervisor
multi-tenant_hypervisor
2 CVEs
Database
database
1 CVE
4gl Compiler
4gl_compiler
1 CVE
Mixlib Archive
mixlib-archive
1 CVE
Kendo Ui
kendo_ui
1 CVE
Telerik Extensions For Asp.net Mvc
telerik_extensions_for_asp.net_mvc
1 CVE
Fiddler
fiddler
1 CVE
Whatsupgold
whatsupgold
1 CVE
Flowmon Os
flowmon_os
1 CVE
Flowmon Packet Investigator
flowmon_packet_investigator
1 CVE
Moveit Cloud
moveit_cloud
1 CVE
Openedge Explorer
openedge_explorer
1 CVE
Openedge Management
openedge_management
1 CVE
Chef Infra Server
chef_infra_server
1 CVE
Telerik Justdecompile
telerik_justdecompile
1 CVE
Telerik Test Studio
telerik_test_studio
1 CVE
Moveit Gateway
moveit_gateway
1 CVE
Kendoreact
kendoreact
1 CVE
Kendo Ui For Vue
kendo_ui_for_vue
1 CVE
Telerik Ui For Winui
telerik_ui_for_winui
1 CVE

CVEs (301)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-5015
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.SessionControler.Update allows a low privileged user to chain this SSRF with an Improper Access Contr...Show more
In WhatsUp Gold versions released before 2023.1.3, an authenticated SSRF vulnerability in Wug.UI.Areas.Wug.Controllers.SessionControler.Update allows a low privileged user to chain this SSRF with an Improper Access Control vulnerability. This can be used to escalate privileges to Admin.Show less
CVE-2024-5014
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, a Server Side Request Forgery vulnerability exists in the GetASPReport feature. This allows any authenticated user to retrieve ASP reports from an HTML form.
CVE-2024-5013
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, whi...Show more
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Denial of Service vulnerability was identified. An unauthenticated attacker can put the application into the SetAdminPassword installation step, which renders the application non-accessible.Show less
CVE-2024-5012
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored...Show more
In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored in the product Credential Library.Show less
CVE-2024-5011
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial...Show more
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service.Show less
CVE-2024-5010
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality.  A specially crafted unauthenticated HTTP request can lead to a disclosure of sensitive information.
CVE-2024-5009
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.4 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.
CVE-2024-5008
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportControll...Show more
In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController.Show less
CVE-2024-4885
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands...Show more
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.Show less
CVE-2024-4884
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with...Show more
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges.Show less
CVE-2024-4883
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This vulnerability allows an unauthenticated attacker to achieve the RCE as a service account through NmAp...Show more
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This vulnerability allows an unauthenticated attacker to achieve the RCE as a service account through NmApi.exe.Show less
CVE-2024-5806
1Progress
1Moveit Transfer
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 20...Show more
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.Show less
CVE-2024-5805
1Progress
1Moveit Gateway
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.
CVE-2023-27636
1Progress
1Sitefinity
Jun 17, 2026
Jun 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.
CVE-2024-4563
1Progress
1Moveit Automation
Jun 17, 2026
May 22, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.
CVE-2024-4837
1Progress
1Telerik Report Server
Jun 17, 2026
May 15, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerabil...Show more
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.Show less
CVE-2024-4357
1Progress
1Telerik Reporting
Jun 17, 2026
May 15, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing.
CVE-2024-4202
1Progress
1Telerik Reporting
Jun 17, 2026
May 15, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure instantiation vulnerability.
CVE-2024-4200
1Progress
1Telerik Reporting
Jun 17, 2026
May 15, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
CVE-2024-3892
1Progress
1Telerik Ui For Winforms
Jun 17, 2026
May 15, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the l...Show more
A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.Show less