Progress Software vulnerabilities
Every vulnerability this feed holds for Progress Software, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
2 vulnerabilities tracked.
- 10.0 CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to…
- 7.7 Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WSFTP Server versions prior to 2024.0.6 and 2025.0.3…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Progress Software is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Red Hat Google Linux Microsoft Apple Apache Software Foundation zephyrproject n/a Oracle Corporation Unknown Hewlett Packard Enterprise (HPE) Eclipse Foundation Tanium FreeRDP IBM Dell Samsung Semiconductor SuiteCRM MONGODB kyverno vercel Hitachi vim jpadilla