Progress Software Corporation vulnerabilities, page 3

131 vulnerabilities

Known vulnerabilities in Progress Software Corporation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 15 products.

8.8HighCVE-2024-1632progress software corporation · sitefinity +1 moreIncorrect access control in the Sitefinity backendLow-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.EPSS0.50%7.7HighCVE-2024-11625progress software corporation · sitefinity +1 moreprogress software corporation sitefinityInformation Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.EPSS0.30%8.4HighCVE-2024-11626progress software corporation · sitefinity +1 moreprogress software corporation sitefinityImproper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.EPSS0.36%7.1HighCVE-2024-0396progress software corporation · moveit transfer +1 moreMissing Server-Side Input Validation in HTTP ParameterIn Progress MOVEit Transfer versions released before 2022.0.10 (14.0.10), 2022.1.11 (14.1.11), 2023.0.8 (15.0.8), 2023.1.3 (15.1.3), an input validation issue was discovered. An authenticated user can manipulate a parameter in an HTTPS transaction. The modified transaction could lead to computational errors within MOVEit Transfer and potentially result in a denial of service.EPSS0.54%5.4MediumCVE-2024-9825progress software corporation · chef habitat builderThe Chef Habitat builder is impacted by Indirect Object reference(IDOR) by deletion of personal access tokenThe Chef Habitat builder-api on-prem-builder package  with any version lower than habitat/builder-api/10315/20240913162802 is vulnerable to indirect object reference (IDOR) by un-authorized deletion of personal token.  Habitat builder consumes builder-api habitat package as a dependency and the vulnerability was specifically due to builder-api habitat package. The fix was made available in habitat/builder-api/10315/20240913162802 and all the subsequent versions after that. We would recommend user to always use on-prem stable channel.EPSS0.28%6.5MediumCVE-2024-9999progress software corporation · ws_ftp serverMulti-Factor Authentication Bypass in Progress WS_FTP ServerIn WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.EPSS0.41%5.4MediumCVE-2024-4562progress software corporation · whatsup gold +1 moreWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsIn WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in the HTTP Monitoring functionality.  Due to the lack of proper authorization, any authenticated user can access the HTTP monitoring functionality, what leads to the Server Side Request Forgery.EPSS0.38%9.8CriticalCVE-2024-4884progress software corporation · whatsup gold +1 moreWhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution VulnerabilityIn WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges.EPSS24.31%8.6HighCVE-2024-4202progress software corporation · telerik reporting +1 moreProgress Telerik Reporting Local Instantiation VulnerabilityIn Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure instantiation vulnerability.EPSS0.27%7.8HighCVE-2024-4200progress software corporation · telerik reporting +1 moreProgress Telerik Reporting Local Deserialization VulnerabilityIn Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.EPSS0.29%5.3MediumCVE-2024-4882progress software corporation · sitefinityURL Redirection to Arbitrary Site Exists in SitefinityThe user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.EPSS0.38%9.8CriticalCVE-2024-4883progress software corporation · whatsup gold +1 moreWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityIn WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This vulnerability allows an unauthenticated attacker to achieve the RCE as a service account through NmApi.exe.EPSS64.53%5.3MediumCVE-2024-4561progress software corporation · whatsup gold +1 moreWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconControllerIn WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.EPSS0.43%9.8CriticalCVE-2024-4885progress software corporation · whatsup gold +1 moreWhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution VulnerabilityIn WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.KEVEPSS99.29%9.8CriticalCVE-2024-4358progress software corporation · telerik report server +1 moreRegistration Authentication Bypass VulnerabilityIn Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.KEVEPSS97.48%6.5MediumCVE-2024-7744progress software corporation · ws_ftp server +1 moreImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP ServerIn WS_FTP Server versions before 8.8.8 (2022.0.8), an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Web Transfer Module allows File Discovery, Probe System Files, User-Controlled Filename, Path Traversal.   An authenticated file download flaw has been identified where a user can craft an API call that allows them to download a file from an arbitrary folder on the drive where that user host's root folder is located (by default this is C:)EPSS0.69%8.8HighCVE-2024-7293progress software corporation · telerik report server +1 morePassword policy for new users is not strong enoughIn Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.EPSS0.33%9.8CriticalCVE-2024-7763progress software corporation · whatsup gold +1 moreWhatsUp Gold getReport Missing Authentication Authentication Bypass VulnerabilityIn WhatsUp Gold versions released before 2024.0.0,  an Authentication Bypass issue exists which allows an attacker to obtain encrypted user credentials.EPSS0.61%8.8HighCVE-2024-7292progress software corporation · telerik report server +1 moreAccount Controller allows high count of login attemptsIn Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.EPSS0.33%8.1HighCVE-2024-7745progress software corporation · ws_ftp server +1 moreMulti-Factor Authentication Bypass in Progress WS_FTP ServerIn WS_FTP Server versions before 8.8.8 (2022.0.8), a Missing Critical Step in Multi-Factor Authentication of the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.EPSS0.36%