Vulnerabilidades em Progress Software Corporation

96 resultados
Análise Vexday

Com 4,65% das CVEs catalogadas confirmadas no CISA KEV, a Progress Software Corporation apresenta uma taxa de exploração ativa 10,3 vezes acima da média geral do catálogo, sinalizando que vulnerabilidades nesse ecossistema atraem atenção consistente de agentes maliciosos. Das 86 CVEs registradas, 19 são de severidade crítica e 5 contam com prova de conceito pública, o que amplia a superfície de risco para organizações que não mantêm ciclos ágeis de atualização. O pior caso ativo hoje é o CVE-2024-4885, com EPSS de 0,9929 — valor extremamente elevado que indica altíssima probabilidade de exploração —, exigindo atenção prioritária de equipes de resposta. O tipo de falha mais recorrente (CWE-79) aponta para problemas persistentes de sanitização de saída, aspecto que deve ser considerado em revisões de configuração e controles de segurança em camada de aplicação.

CVE-2024-4885CRITICALWhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution VulnerabilityEPSS 99.3%KEVCVE-2024-4358CRITICALRegistration Authentication Bypass VulnerabilityEPSS 97.5%KEVCVE-2024-6670CRITICALWhatsUp Gold HasErrors SQL Injection Authentication Bypass VulnerabilityEPSS 94.7%KEVCVE-2023-40044CRITICALWS_FTP Server Ad Hoc Transfer Module .NET Deserialization VulnerabilityEPSS 90.1%KEVCVE-2024-5010HIGHWhatsUp Gold TestController multiple information disclosure vulnerabilitiesEPSS 70.0%CVE-2024-4883CRITICALWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityEPSS 64.8%CVE-2024-46909CRITICALWhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityEPSS 49.2%CVE-2024-5011HIGHWhatsUp Gold TestController Chart denial of service vulnerabilityEPSS 47.1%CVE-2024-12105MEDIUMWhatsUp Gold - SnmpExtendedActiveMonitor path traversalEPSS 42.4%CVE-2024-46906HIGHWhatsUp Gold GetSqlWhereClause SQL Injection Privilege Escalation VulnerabilityEPSS 40.6%CVE-2024-1800CRITICALProgress Telerik Report Server DeserializationEPSS 40.4%CVE-2024-4884CRITICALWhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 24.3%CVE-2024-5016HIGHWhatsUp Gold OnMessage Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 22.4%CVE-2024-5008HIGHWhatsUp Gold APM Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 17.3%CVE-2023-42657CRITICALWS_FTP Server Directory TraversalEPSS 17.0%CVE-2024-5009HIGHWhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation VulnerabilityEPSS 15.0%CVE-2024-6671CRITICALWhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass VulnerabilityEPSS 14.9%CVE-2024-8785CRITICALWhatsUp Gold Registry Overwrite Remote Code Execution VulnerabilityEPSS 9.7%CVE-2024-12106CRITICALWhatsUp Gold - LDAP configuration interface leading to allowing attacker to configure LDAP settings without authenticationEPSS 9.4%CVE-2024-12108CRITICALWhatsUp Gold - Public API signing key rotation issueEPSS 6.8%