Progress Software · weakness class
Command and Code Injection
45 CVEs · 2 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 2
- check available
- 2
- likely to be exploited
- 8
Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.
- Progress ADC LoadMaster - Command Injection
- Progress Kemp LoadMaster - Command Injection
- Progress Kemp Flowmon - Command Injection
- Kemp LoadMaster Load Balancer - Unauthenticated Command Injection
- WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability
- LoadMaster Command Injection Vulnerability
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
- Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX
- WhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution Vulnerability
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP MIB file that could…
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- OS command injection in Progress Software Autonomous REST Connector GenAI Agents
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
- Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
- OS Command Injection in Progress WS_FTP Server
- Automate Vulnerable to Malicious Content Uploaded Through Embedded Compliance Application
- Command Injection via FTP Notification Variables in Progress WS_FTP Server
- Authenticated Command Injection via configuration parameter manipulation in exposed RMI interface
- Unsafe Deserialization Vulnerability
- Telerik Report Server Insecure Type Resolution
- Improper neutralization special element in hyperlinks
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.