Progress: >> Openedge >> 11.2 Security Vulnerabilities
Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.
CVSS Score
9.8
EPSS Score
0.001
Published
2017-10-31
Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the selection parameter.
CVSS Score
5.0
EPSS Score
0.035
Published
2014-11-12