Skip to content

Progress Software · weakness class

Memory Corruption

8 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. Buffer overflow in Ipswitch WS_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long op…CVE-2008-0590Progress · 22% likely

    CWE-119

  2. Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.…CVE-2025-1758Progress · CVSS 4.3 · 4.9% likely

    CWE-121

  3. A buffer overflow was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. An overly large value for certain options of a connection string may overrun…CVE-2023-34364Progress · CVSS 9.8 · 1.6% likely

    CWE-787

  4. Progress Application Server (PAS) for OpenEdge Denial of ServiceCVE-2023-40052Progress Software Corporation · CVSS 7.5 · 0.6% likely

    CWE-119

  5. Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP ServerCVE-2026-90869Progress Software · CVSS 7.5 · 0.4% likelycovered by CyberSIXT

    CWE-1251 article

  6. Out-of-bounds read in Progress MarkLogic ServerCVE-2026-85968Progress Software Corporation · CVSS 7.1 · 0.3% likely

    CWE-125

  7. Out-of-bounds write in Progress MarkLogic ServerCVE-2026-85969Progress Software Corporation · CVSS 7.1 · 0.2% likely

    CWE-787

  8. Use-after-free in Progress MarkLogic Server JavaScript engine integrationCVE-2026-85965Progress Software Corporation · CVSS 8 · 0.2% likely

    CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.