Openedge Innovation vulnerabilities

2 known vulnerabilities in Openedge Innovation from Progress Software. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  OpenEdge: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-40052Jan 18, 2024Progress Software

  This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 . An attacker who can produce a malformed web request may cause the crash of a PASOE agent poten

• 9.9 Critical severity

  OpenEdge: Unrestricted Upload of File with Dangerous Type

  CVE-2023-40051Jan 18, 2024Progress Software

  This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to