Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Progress Software Corporation vulnerabilities

132 published CVEs name Progress Software Corporation among the affected products; CISA lists 4 of them as exploited in the wild.

All 132 in the listAtom feed of new CVEs
Published CVEs
132
Last 12 months
48
Critical
32
Known exploited
4

Critical 32High 75Medium 25Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 202322
  2. 202456
  3. 20256
  4. 202648

Known exploitedNewest addition to KEV first

  • CVE-2024-4885

    WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability

    Progress Software Corporation · WhatsUp Gold

    ExploitedCritical9.8
  • CVE-2024-6670

    WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability

    Progress Software Corporation · WhatsUp Gold

    ExploitedCritical9.8
  • CVE-2024-4358

    Registration Authentication Bypass Vulnerability

    Progress Software Corporation · Telerik Report Server

    ExploitedCritical9.8
  • CVE-2023-40044

    WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

    Progress Software Corporation · WS_FTP Server

    ExploitedCritical10.0

Newest CVEs

  • CVE-2026-85976

    HTTP response splitting in Progress MarkLogic Server Query Console

    Progress Software Corporation · MarkLogic Server

    Medium5.4
  • CVE-2026-85975

    Cleartext transmission in Progress MarkLogic Server Amazon S3 connections

    Progress Software Corporation · MarkLogic Server

    High7.5
  • CVE-2026-85974

    Improper TLS hostname verification in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    High7.4
  • CVE-2026-85973

    Cleartext transmission in Progress MarkLogic Server cluster join operations

    Progress Software Corporation · MarkLogic Server

    High7.4
  • CVE-2026-85972

    Improper Kerberos server verification in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    High7.4
  • CVE-2026-85971

    Incorrect log file permissions in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    High7.1
  • CVE-2026-85970

    Improper XML external entity restriction in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    High7.1
  • CVE-2026-85969

    Out-of-bounds write in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    High7.1
  • CVE-2026-85968

    Out-of-bounds read in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    High7.1
  • CVE-2026-85967

    Cross-site scripting in Progress MarkLogic Server

    Progress Software Corporation · MarkLogic Server

    Medium6.1

Products with the most CVEs

  1. WhatsUp Gold42
  2. MarkLogic Server41
  3. WS_FTP Server11
  4. Sitefinity7
  5. Telerik Report Server7
  6. MOVEit Transfer6
  7. OpenEdge5
  8. Telerik Reporting5
  9. LoadMaster2
  10. Chef Automate1

Most common weaknesses

  1. CWE-22 Path traversal13
  2. CWE-269 Improper privilege management13
  3. CWE-79 Cross-site scripting (XSS)13
  4. CWE-89 SQL injection10
  5. CWE-918 Server-side request forgery (SSRF)9
  6. CWE-94 Code injection8
  7. CWE-287 Improper authentication7
  8. CWE-502 Deserialization of untrusted data7
  9. CWE-434 Unrestricted file upload5
  10. CWE-306 Missing authentication for a critical function4