Log in Start free

Progress Software Corporation

Products

ProductCVEsExploitedLatest
WhatsUp Gold422Aug 12, 2026
WS_FTP Server111Nov 12, 2024
Telerik Report Server71Nov 13, 2024
MarkLogic Server41–Oct 12, 2026
Sitefinity7–Apr 9, 2025
MOVEit Transfer6–Jan 17, 2024
OpenEdge5–Apr 14, 2026
Telerik Reporting5–Jul 24, 2024
LoadMaster2–May 2, 2024
MOVEit Automation1–May 22, 2024
Progress® Telerik® Reporting1–Feb 12, 2025
Telerik UI for WinForms1–May 15, 2024
Chef InSpec1–Oct 31, 2023
Chef Automate1–Oct 31, 2023
Chef Habitat Builder1–Oct 28, 2024

Exploited and recent CVEs

  • CVE-2024-6670 Critical 9.8 Exploited WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability 92.9%
  • CVE-2024-4885 Critical 9.8 Exploited WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability 99.3%
  • CVE-2024-4358 Critical 9.8 Exploited Registration Authentication Bypass Vulnerability 97.5%
  • CVE-2023-40044 Critical 10.0 Exploited WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability 90.4%
  • CVE-2026-85976 Medium 5.4 HTTP response splitting in Progress MarkLogic Server Query Console 0.1%
  • CVE-2026-85975 High 7.5 Cleartext transmission in Progress MarkLogic Server Amazon S3 connections 0.2%
  • CVE-2026-85974 High 7.4 Improper TLS hostname verification in Progress MarkLogic Server 0.1%
  • CVE-2026-85973 High 7.4 Cleartext transmission in Progress MarkLogic Server cluster join operations 0.1%
  • CVE-2026-85972 High 7.4 Improper Kerberos server verification in Progress MarkLogic Server 0.3%
  • CVE-2026-85971 High 7.1 Incorrect log file permissions in Progress MarkLogic Server 0.1%
  • CVE-2026-85970 High 7.1 Improper XML external entity restriction in Progress MarkLogic Server 0.3%
  • CVE-2026-85969 High 7.1 Out-of-bounds write in Progress MarkLogic Server 0.2%
  • CVE-2026-85968 High 7.1 Out-of-bounds read in Progress MarkLogic Server 0.3%
  • CVE-2026-85967 Medium 6.1 Cross-site scripting in Progress MarkLogic Server 0.2%
  • CVE-2026-85966 High 7.7 Exposure of sensitive information in Progress MarkLogic Server 0.3%
  • CVE-2026-85965 High 8.0 Use-after-free in Progress MarkLogic Server JavaScript engine integration 0.2%
  • CVE-2026-85964 High 7.7 Path traversal in Progress MarkLogic Server Query Console 0.5%
  • CVE-2026-85963 High 7.5 Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector 0.4%
  • CVE-2026-85962 High 7.5 Improper authentication in Progress MarkLogic Server SAML processing 0.3%
  • CVE-2026-85961 High 7.5 Sensitive information exposure in Progress MarkLogic Server Azure deployments 0.5%
  • CVE-2026-85960 High 7.5 Cross-site request forgery in Progress MarkLogic Server Query Console 0.2%
  • CVE-2026-85959 High 7.5 Insufficient authentication logging in Progress MarkLogic Server 0.4%
  • CVE-2026-85958 High 7.5 Improper OAuth token validation in Progress MarkLogic Server 0.4%
  • CVE-2026-85957 High 7.5 Improper XML external entity restriction in Progress MarkLogic Server SAML processing 0.4%
  • CVE-2026-85956 Critical 9.6 Improper privilege management in Progress MarkLogic Server backup and restore operations 0.4%
  • CVE-2026-85955 Critical 9.9 Improper privilege management in Progress MarkLogic Server xdmp:eval-in 0.6%
  • CVE-2026-85954 High 8.6 Improper privilege management in Progress MarkLogic Server higher-order XQuery functions 0.3%
  • CVE-2026-85953 High 8.5 Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio 0.4%
  • CVE-2026-85952 High 8.5 Server-side request forgery in Progress MarkLogic Server Linux cloud deployments 0.2%
  • CVE-2026-85951 High 8.5 Server-side request forgery in Progress MarkLogic Server Azure deployments 0.2%