Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:56 a.m.3 views

CVE-2023-40052

This issue affects Progress Application Server PAS for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An attacker who can produce a malformed web request may cause the crash of a PASOE agent potentially disrupting the thread activities...

7.5CVSS6.8AI score0.0003EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:59 a.m.11 views

CVE-2024-7345

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

9.6CVSS7.4AI score0.00057EPSS
Exploits0References1
NVD
NVD
added 2024/09/03 3:15 p.m.14 views

CVE-2024-7345

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

9.6CVSS0.00057EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/09/03 2:50 p.m.17 views

CVE-2024-7345 Direct local client connections to MS Agents can bypass authentication

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms...

8.3CVSS0.00057EPSS
Exploits0References1
CVE
CVE
added 2024/09/03 2:50 p.m.58 views

CVE-2024-7345

CVE-2024-7345 involves a Local ABL Client bypassing PASOE security checks that can enable unauthorized code injection into OpenEdge Multi-Session Agents. Affected OpenEdge LTS platforms include versions up to 11.7.18 and 12.2.13 on all supported releases. Root cause: bypass of required PASOE secu...

9.6CVSS8.5AI score0.00057EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2024/01/18 3:15 p.m.12 views

CVE-2023-40052

This issue affects Progress Application Server PAS for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An attacker who can produce a malformed web request may cause the crash of a PASOE agent potentially disrupting the thread activities...

7.5CVSS7.5AI score0.0003EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/18 12:0 a.m.1 views

Progress Software OpenEdge Buffer Error Vulnerability

Progress Software OpenEdge is a suite of integrated development environments IDEs from the US-based Progress Software. A security vulnerability exists in Progress Software OpenEdge versions 11.7 through 11.7.18 and 12.2 through 12.2.13. An attacker could exploit the vulnerability to cause the PAS...

7.5CVSS6.6AI score0.0003EPSS
Exploits0References3
Rows per page
Query Builder