Progress Software · weakness class
Information Disclosure
13 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
- likely to be exploited
- 1
Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.
- Chef Automate < 4.13.295 — SQL Injection
- WhatsUp Gold TestController multiple information disclosure vulnerabilities
- WS_FTP Server Information Disclosure via Directory Listing
- Sensitive information exposure in Progress MarkLogic Server Azure deployments
- RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX
- RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX
- Trust Boundary Violation Vulnerability
- Sensitive information exposure in Progress MarkLogic Server trace logs
- Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server
- Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 t…
- Exposure of sensitive information in Progress MarkLogic Server
- Progress Chef Infra Server before 15.7 allows a local attacker to exploit a /var/opt/opscode/local-mode-cache/backup world-readable temporary backup path to access sensitive infor…
- MOVEit Transfer Local Disclosure of Session Information Vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.