progress openedge innovation vulnerabilities

Latest progress openedge innovation CVEs

Newest publication first

1. CVE-2023-40052 Progress Application Server (PAS) for OpenEdge Denial of Service

   Published 2024-01-18

   High·CVSS 7.5 EPSS 0.57%

   This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An attacker who can produce a malformed web request may cause the crash of a PASOE agent potentially disrupting th...

2. CVE-2023-40051 Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal

   Published 2024-01-18

   Critical·CVSS 9.9 EPSS 0.56%

   This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.