Progress
9 vulnerabilities in Progress products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-8037 | Progress | LoadMaster | Progress LoadMaster Command Injection Vulnerability | 7 Aug 2026 | 10 Aug 2026 | Unknown |
| CVE-2024-4885 | Progress | WhatsUp Gold | Progress WhatsUp Gold Path Traversal Vulnerability | 3 Mar 2025 | 24 Mar 2025 | Unknown |
| CVE-2024-1212 | Progress | Kemp LoadMaster | Progress Kemp LoadMaster OS Command Injection Vulnerability | 18 Nov 2024 | 9 Dec 2024 | Unknown |
| CVE-2024-6670 | Progress | WhatsUp Gold | Progress WhatsUp Gold SQL Injection Vulnerability | 16 Sep 2024 | 7 Oct 2024 | Known |
| CVE-2024-4358 | Progress | Telerik Report Server | Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | 13 Jun 2024 | 4 Jul 2024 | Unknown |
| CVE-2023-40044 | Progress | WS_FTP Server | Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | 5 Oct 2023 | 26 Oct 2023 | Known |
| CVE-2023-34362 | Progress | MOVEit Transfer | Progress MOVEit Transfer SQL Injection Vulnerability | 2 Jun 2023 | 23 Jun 2023 | Known |
| CVE-2017-9248 | Progress | ASP.NET AJAX and Sitefinity | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2019-18935 | Progress | Telerik UI for ASP.NET AJAX | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |