Progress Software · weakness class
Input Validation and Logic
16 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
- likely to be exploited
- 1
Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.
- Progress ShareFile Storage Zones Controller - Authentication Bypass
- In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a me…
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Access Control Vulnerability in Progress MOVEit Automation
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows OS Command Injection.
- Missing Server-Side Input Validation in HTTP Parameter
- CWE-20: Improper Input Validation in web services in Progress Sitefinity
- Potential Use of the Sitefinity System for Distribution of Phishing Emails
- Uncaught Exceptions in Telerik UI for ASP.NET MVC Filter Processing
- FTP Quota Accounting Bypass in Progress WS_FTP Server
- AI Command Filters On Any Property Bypassing Column Allowlist
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.