Progress Vulnérabilités

Chronologie

Taper

Not Defined	68
Network Management Software	13
File Transfer Software	12
Content Management System	5
Reporting Software	4

Produit

Progress MOVEit Transfer	23
Progress WS_FTP Server	12
Progress Sitefinity	11
Progress WhatsUp Gold	9
Progress OpenEdge	7

Contre-mesures

Official Fix	87
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	20

Exploitabilité

High	2
Functional	0
Proof-of-Concept	7
Unproven	1
Not Defined	98

Vecteur d'accès

Not Defined	0
Physical	0
Local	13
Adjacent	13
Network	82

Authentification

Not Defined	0
High	10
Low	42
None	56

Interaction de l'utilisateur

Not Defined	0
Required	28
None	80

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	3
≤5	17
≤6	27
≤7	13
≤8	24
≤9	17
≤10	7

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	3
≤5	19
≤6	29
≤7	14
≤8	23
≤9	15
≤10	5

VulDB

≤1	0
≤2	0
≤3	6
≤4	16
≤5	19
≤6	17
≤7	18
≤8	24
≤9	2
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	11
≤7	13
≤8	12
≤9	8
≤10	17

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	2
≤7	2
≤8	17
≤9	8
≤10	9

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	22
<2k	66
<5k	20
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	108
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (36): 4GL Compiler (1), Chef Automate (1), Chef InSpec (1), Chef Infra Client (1), Chef Infra Server (1), DataDirect Connect for ODBC (2), Database (4), Flowmon (1), Flowmon FPI (1), Flowmon OS (1), JustAssembly (1), JustDecompile (1), Kendo UI Editor (1), LoadMaster (3), MOVEit Automation (1), MOVEit Transfer (23), Messenger (1), OpenEdge (7), OpenEdge OEE (1), OpenEdge OEM (1), Redirection (1), Sitefinity (11), Sitefinity CMS (5), Telerik JustDecompile (1), Telerik Report Server (1), Telerik Reporting (3), Telerik Test Studio (1), Telerik UI for ASP.NET AJAX (2), UI for ASP.NET AJAX (2), UI for Silverlight (1), WS_FTP Server (12), WebSpeed (1), Webspeed (1), Webspeed Messenger (1), WhatsUp Gold (9), Whatsup Gold (4)

Publié	Base	Temp	Vulnérabilité	Prod	Exp	Con	EPSS	CTI	CVE
02/04/2024	9.9	9.7	Progress Flowmon Management Interface elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00439	0.04	CVE-2024-2389
22/03/2024	5.9	5.8	Progress LoadMaster cross site request forgery	Inconnue	Not Defined	Official Fix	0.00043	0.03	CVE-2024-2449
22/03/2024	7.6	7.4	Progress LoadMaster elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00043	0.00	CVE-2024-2448
20/03/2024	4.3	4.2	Progress MOVEit Transfer vulnérabilité inconnue	Inconnue	Not Defined	Official Fix	0.00043	0.03	CVE-2024-2291
20/03/2024	9.3	9.1	Progress Telerik Report Server elévation de privilèges	Reporting Software	Not Defined	Official Fix	0.00043	0.02	CVE-2024-1800
20/03/2024	6.5	6.4	Progress Telerik Reporting elévation de privilèges	Reporting Software	Not Defined	Official Fix	0.00043	0.03	CVE-2024-1801
20/03/2024	8.0	7.8	Progress Telerik Reporting elévation de privilèges	Reporting Software	Not Defined	Official Fix	0.00043	0.02	CVE-2024-1856
28/02/2024	5.7	5.7	Progress Sitefinity Page Editing Area cross site scripting	Inconnue	Not Defined	Official Fix	0.00043	0.15	CVE-2024-1636
28/02/2024	6.5	6.4	Progress Sitefinity Administrative Area elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00043	0.02	CVE-2024-1632
27/02/2024	9.9	9.7	Progress OpenEdge authentification faible	Inconnue	Not Defined	Official Fix	0.00043	0.00	CVE-2024-1403
21/02/2024	8.6	8.5	Progress LoadMaster elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00721	0.00	CVE-2024-1212
21/02/2024	5.3	5.2	Progress WS_FTP Server Administrative Interface cross site scripting	File Transfer Software	Not Defined	Official Fix	0.00043	0.00	CVE-2024-1474
31/01/2024	7.5	7.4	Progress Telerik Test Studio Applications Installer elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00061	0.00	CVE-2024-0833
31/01/2024	7.5	7.4	Progress Telerik Reporting Applications Installer elévation de privilèges	Reporting Software	Not Defined	Official Fix	0.00061	0.02	CVE-2024-0832
31/01/2024	7.5	7.4	Progress Telerik JustDecompile Applications Installer elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00061	0.03	CVE-2024-0219
18/01/2024	7.5	7.3	Progress OpenEdge Web Request buffer overflow	Inconnue	Not Defined	Official Fix	0.00046	0.02	CVE-2023-40052
18/01/2024	8.4	8.3	Progress OpenEdge Web Transport Request elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00050	0.03	CVE-2023-40051
17/01/2024	6.8	6.6	Progress MOVEit Transfer HTTPS Transaction dénie de service	Inconnue	Not Defined	Official Fix	0.00063	0.00	CVE-2024-0396
20/12/2023	4.4	4.4	Progress Sitefinity elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00063	0.02	CVE-2023-6784
14/12/2023	5.1	5.1	Progress WhatsUp Gold Role cross site scripting	Network Management Software	Not Defined	Official Fix	0.00045	0.00	CVE-2023-6367
14/12/2023	5.0	4.9	Progress WhatsUp Gold Alert Center cross site scripting	Network Management Software	Not Defined	Official Fix	0.00045	0.00	CVE-2023-6366
14/12/2023	6.0	6.0	Progress WhatsUp Gold API Endpoint elévation de privilèges	Network Management Software	Not Defined	Official Fix	0.00052	0.00	CVE-2023-6595
14/12/2023	5.0	4.9	Progress WhatsUp Gold elévation de privilèges	Network Management Software	Not Defined	Official Fix	0.00052	0.00	CVE-2023-6368
14/12/2023	5.0	4.9	Progress WhatsUp Gold Dashboard cross site scripting	Network Management Software	Not Defined	Official Fix	0.00045	0.00	CVE-2023-6364
14/12/2023	5.1	5.1	Progress WhatsUp Gold Device Group cross site scripting	Network Management Software	Not Defined	Official Fix	0.00045	0.00	CVE-2023-6365

83 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 83 results.

◂ PrécédentAperçuSuivant ▸

Interested in the pricing of exploits?

See the underground prices here!