Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Progress Software — Vulnerabilities & Security Advisories 90

Browse all 90 CVE security advisories affecting Progress Software. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Progress Software develops enterprise software solutions, primarily focusing on application development platforms, database management, and integration tools for large-scale organizations. Its portfolio includes widely used technologies like OpenEdge and Telerik, which serve as critical infrastructure for business operations. Historically, security audits have identified recurring vulnerability classes within its products, including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws. These issues often stem from input validation errors or improper access controls in legacy components. While no single catastrophic breach has defined the company’s public security history, the accumulation of 55 recorded CVEs highlights persistent challenges in maintaining secure codebases across complex, long-standing software architectures. The company generally responds to disclosures through standard patch cycles, though the volume of findings suggests ongoing efforts to modernize security practices across its diverse product line.

Found 19 results / 90 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-345 8.1 High 2026-09-02
CVE-2026-18672 RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-22 7.5 High 2026-09-02
CVE-2026-14932 Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart — Telerik UI for ASP.NET AJAX CWE-321 6.5 Medium 2026-07-22
CVE-2026-14865 XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-776 5.3 Medium 2026-07-22
CVE-2026-13192 RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-918 6.5 Medium 2026-07-22
CVE-2026-13190 PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-07-22
CVE-2026-13189 SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-36 7.5 High 2026-07-22
CVE-2026-13188 DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-345 5.9 Medium 2026-07-22
CVE-2026-13187 DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-470 8.1 High 2026-07-22
CVE-2026-13186 AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-22 8.1 High 2026-07-22
CVE-2026-13185 PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-07-22
CVE-2026-13184 RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-321 7.5 High 2026-07-22
CVE-2026-13183 RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-208 7.5 High 2026-07-22
CVE-2026-13182 RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-209 7.5 High 2026-07-22
CVE-2026-13181 RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-470 8.1 High 2026-07-22
CVE-2026-6023 Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-502 8.1 High 2026-04-22
CVE-2026-6022 Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-400 7.5 High 2026-04-22
CVE-2026-2878 Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX CWE-331 5.3 Medium 2026-02-25
CVE-2025-3600 Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX — Telerik UI for ASP.NET AJAX 7.5 High 2025-05-14

This page lists every published CVE security advisory associated with Progress Software. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.