Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

OpenEdge — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in OpenEdge, with AI-generated Chinese analysis, references, and POCs.

Vendor: Progress Software Corporation

CVE IDTitleCVSSSeverityPaused
CVE-2025-8095 Recoverable obfuscation using the OECH1 prefix encoding in OpenEdge CWE-257 8.1 -2026-04-14
CVE-2025-7389 Unauthorized Arbitrary File Read via RMI in AdminServer Interface CWE-552 6.5 -2026-04-14
CVE-2025-7388 Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface CWE-77 8.4 High2025-09-04
CVE-2024-7346 Client connections using default TLS certificates from OpenEdge may bypass TLS host name validation CWE-297 7.2 High2024-09-03
CVE-2024-7345 Direct local client connections to MS Agents can bypass authentication CWE-94 8.3 High2024-09-03
CVE-2024-7654 Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery service CWE-79 8.3 High2024-09-03
CVE-2024-1403 Authentication Bypass in OpenEdge Authentication Gateway and AdminServer CWE-305 10.0 Critical2024-02-27
CVE-2023-40052 Progress Application Server (PAS) for OpenEdge Denial of Service CWE-119 7.5 High2024-01-18
CVE-2023-40051 Progress Application Server (PAS) for OpenEdge File Upload via Directory Traversal CWE-434 9.1 Critical2024-01-18

All 9 known CVE vulnerabilities affecting OpenEdge with full Chinese analysis, references, and POCs where available.