Progress Openedge Innovation vulnerabilities

2 CVEs affecting Progress Openedge Innovation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40052, published 2024-01-18.

More from Progress.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-40052, published 2024-01-18. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0 .  An attacker who can produce…
• CVE-2023-40051, published 2024-01-18. Critical severity, CVSS 9.9. EPSS: 0.6% chance of exploitation in the next 30 days. This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a…