CVE-2015-9245 Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via....
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| progress openedge | = 10.2a | No fix listed |
| progress openedge | = 10.2b | No fix listed |
| progress openedge | = 10.2b07 | No fix listed |
| progress openedge | = 10.2b08 | No fix listed |
| progress openedge | = 11.0 | No fix listed |
| progress openedge | = 11.1 | No fix listed |
| progress openedge | = 11.2 | No fix listed |
| progress openedge | = 11.3 | No fix listed |
| progress openedge | = 11.4 | No fix listed |
| progress openedge | = 11.5 | No fix listed |
References
- knowledgebase.progress.com issue-tracking vendor-advisory