What’s Vulnerable › Products

Progress Software Corporation OpenEdge vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Progress Software Corporation OpenEdge version is affected

Latest Progress Software Corporation OpenEdge vulnerabilities

• CVE-2025-8095 — Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge (CVSS 9.1)
• CVE-2025-7389 — Unauthorized Arbitrary File Read via RMI in AdminServer Interface (CVSS 8.2)
• CVE-2025-7388 — Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface (CVSS 8.4)
• CVE-2024-7654 — Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service (CVSS 6.1)
• CVE-2024-7346 — Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation (CVSS 4.8)
• CVE-2024-7345 — Direct local client connections to MS Agents can bypass authentication (CVSS 9.6)
• CVE-2024-1403 — Authentication Bypass in OpenEdge Authentication Gateway and AdminServer (CVSS 9.8)
• CVE-2023-40052 — Progress Application Server (PAS) for OpenEdge Denial of Service (CVSS 7.5)
• CVE-2023-40051 — Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal (CVSS 9.9)
• CVE-2023-34203 — (CVSS 8.8)
• CVE-2022-29849 — (CVSS 7.8)
• CVE-2015-9245 — (CVSS 9.8)
• CVE-2014-8555 — (CVSS 5.0)
• CVE-2007-2417 — (CVSS 10.0)
• CVE-2007-3491 — (CVSS 7.5)