What’s Vulnerable › Vulnerabilities
CVE-2024-7345: Direct local client connections to MS Agents can bypass authentication
- Severity: critical (CVSS 9.6 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-03 · updated 2026-06-17
- Weakness: CWE-94
Description
Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms
Affected products
- Progress Software Corporation OpenEdge: through 11.7.18; from 12.0 through 12.2.13
References
Get alerted when CVE-2024-7345 or the next vulnerability affects your stack