What’s Vulnerable › Vulnerabilities

CVE-2025-8095: Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge

• Severity: critical (CVSS 9.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-14 · updated 2026-10-07
• Weakness: CWE-257

Description

The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.  It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications.  OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption.

Affected products

• Progress Software Corporation OpenEdge: from 12.2.0 through 12.2.18; from 12.8.0 through 12.8.9

References

• https://community.progress.com/s/article/Unintended-Use-of-OECH1-for-Password-Secrets-Protection

Get alerted when CVE-2025-8095 or the next vulnerability affects your stack