Openedge

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE…CVE-2007-2417Progress · 16% likely
2. Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the selec…CVE-2014-8555Progress · 7.5% likely

   CWE-22

3. Authentication Bypass in OpenEdge Authentication Gateway and AdminServerCVE-2024-1403Progress · CVSS 10 · 3.3% likely

   CWE-305

4. Buffer overflow in _mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unknown impact via a malformed TCP/IP messag…CVE-2007-3491Progress · 2.5% likely
5. Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malici…CVE-2015-9245Progress · 1.9% likely

   CWE-284

6. In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change…CVE-2023-34203Progress · 1.1% likely

   CWE-74

7. Authenticated Command Injection via configuration parameter manipulation in exposed RMI interfaceCVE-2025-7388Progress Software Corporation · CVSS 8.4 · 1.0% likely

   CWE-77

8. Direct local client connections to MS Agents can bypass authenticationCVE-2024-7345Progress · CVSS 8.3 · 0.6% likely

   CWE-94

9. Progress Application Server (PAS) for OpenEdge Denial of ServiceCVE-2023-40052Progress Software Corporation · CVSS 7.5 · 0.6% likely

   CWE-119

10. Progress Application Server (PAS) for OpenEdge File Upload via Directory TraversalCVE-2023-40051Progress Software Corporation · CVSS 9.1 · 0.6% likely

    CWE-434

11. Unauthorized Arbitrary File Read via RMI in AdminServer InterfaceCVE-2025-7389Progress Software Corporation · CVSS 8.2 · 0.3% likely

    CWE-552

12. Unauthenticated Content Injection in OpenEdge Management web interface via ActiveMQ discovery serviceCVE-2024-7654Progress · CVSS 8.3 · 0.3% likely

    CWE-79

13. In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local a…CVE-2022-29849Progress · 0.3% likely
14. Recoverable obfuscation using the OECH1 prefix encoding in OpenEdgeCVE-2025-8095Progress Software Corporation · CVSS 9.1 · 0.2% likely

    CWE-257

15. Client connections using default TLS certificates from OpenEdge may bypass TLS host name validationCVE-2024-7346Progress · CVSS 7.2 · 0.2% likely

    CWE-297

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.