Progress vulnerabilities
Every vulnerability this feed holds for Progress, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
4 vulnerabilities tracked. 1 confirmed exploited in the wild. 1 with public exploit code.
- — Progress LoadMaster Command Injection Vulnerability
- 9.1 Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit…
- 8.6 Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress…
- 8.6 Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Progress is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Google Red Hat Microsoft Apple zephyrproject Apache Software Foundation n/a Hewlett Packard Enterprise (HPE) MediaTek, Inc. Linux Tanium Eclipse Foundation Unknown FreeRDP IBM Dell Oracle Corporation MONGODB Gitea WAVLINK kyverno vercel vim Hitachi