Openedge
Vendor:
First CVE: Jun 29, 2007 · Active for 19 years
12
Total CVEs
More Total CVEs than 90% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Openedge over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 29, 2007
19 years ago
Most Recent CVE
Sep 3, 2024
690 days ago
CVE Severity & Scoring
Openedge12 CVEs
25%
42%
33%
All CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (8.3%)
Network7 (58.3%)
Unknown3 (25.0%)
Physical0 (0.0%)
Adjacent Network1 (8.3%)
Attack Complexity
Low8 (66.7%)
High1 (8.3%)
Unknown3 (25.0%)
User Interaction
None8 (66.7%)
Unknown3 (25.0%)
Required1 (8.3%)
Privileges Required
Low3 (25.0%)
High0 (0.0%)
None6 (50.0%)
Unknown3 (25.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-1403CRITICAL In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has | Feb 27, 2024 | 9.8 | 34 | NO | NO |
CVE-2007-2417HIGH Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/ | Jul 15, 2007 | 10.0 | 32 | NO | NO |
CVE-2023-40051CRITICAL This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can | Jan 18, 2024 | 9.9 | 28 | NO | NO |
CVE-2024-7345CRITICAL Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platfo | Sep 3, 2024 | 9.6 | 27 | NO | NO |
CVE-2022-29849HIGH In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local at | May 2, 2022 | 7.8 | 25 | NO | NO |
CVE-2014-8555MEDIUM Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the select | Nov 12, 2014 | 5.0 | 25 | NO | YES |
CVE-2023-34203HIGH In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change i | Jun 23, 2023 | 8.8 | 24 | NO | NO |
CVE-2015-9245CRITICAL Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicio | Oct 31, 2017 | 9.8 | 24 | NO | NO |
CVE-2023-40052HIGH
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0
.
An attac | Jan 18, 2024 | 7.5 | 22 | NO | NO |
CVE-2007-3491HIGH Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP message | Jun 29, 2007 | 7.5 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
8.3% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Openedge
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 9.1e | 1 | 7.5 | 2.5% | 0 | 0 |
| 11.5 | 1 | 9.8 | 1.9% | 0 | 0 |
| 11.4 | 1 | 9.8 | 1.9% | 0 | 0 |
| 11.3 | 1 | 9.8 | 1.9% | 0 | 0 |
| 11.2 | 2 | 7.4 | 4.7% | 0 | 1 |
| 11.1 | 1 | 9.8 | 1.9% | 0 | 0 |
| 11.0 | 1 | 9.8 | 1.9% | 0 | 0 |
| 10.2b08 | 1 | 9.8 | 1.9% | 0 | 0 |
| 10.2b07 | 1 | 9.8 | 1.9% | 0 | 0 |
| 10.2b | 1 | 9.8 | 1.9% | 0 | 0 |
| 10.2a | 1 | 9.8 | 1.9% | 0 | 0 |
| 10.1b | 2 | 8.8 | 9.4% | 0 | 0 |
| 10.1a | 2 | 8.8 | 9.4% | 0 | 0 |