Progress
9 CVEs in CISA KEV — 4 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-34362 |
MOVEit Transfer | — | 0.9993 | 2023-06-02 | 2023-06-23 | RW | Progress MOVEit Transfer contains a SQL injection vulnerability that could allow |
CVE-2026-8037 |
LoadMaster | — | 0.9984 | 2026-08-07 | 2026-08-10 | Progress LoadMaster contains a command injection vulnerability that allows an un | |
CVE-2024-4885 |
WhatsUp Gold | — | 0.9929 | 2025-03-03 | 2025-03-24 | Progress WhatsUp Gold contains a path traversal vulnerability that allows an una | |
CVE-2024-4358 |
Telerik Report Server | — | 0.9748 | 2024-06-13 | 2024-07-04 | Progress Telerik Report Server contains an authorization bypass by spoofing vuln | |
CVE-2024-1212 |
Kemp LoadMaster | — | 0.9539 | 2024-11-18 | 2024-12-09 | Progress Kemp LoadMaster contains an OS command injection vulnerability that all | |
CVE-2024-6670 |
WhatsUp Gold | — | 0.9291 | 2024-09-16 | 2024-10-07 | RW | Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unau |
CVE-2023-40044 |
WS_FTP Server | — | 0.9035 | 2023-10-05 | 2023-10-26 | RW | Progress WS_FTP Server contains a deserialization of untrusted data vulnerabilit |
CVE-2019-18935 |
Telerik UI for ASP.NET AJAX | — | — | 2021-11-03 | 2022-05-03 | RW | Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted dat |
CVE-2017-9248 |
ASP.NET AJAX and Sitefinity | — | — | 2021-11-03 | 2022-05-03 | Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weaknes |