Progress Webspeed vulnerabilities

2 CVEs affecting Progress Webspeed, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2506, published 2007-05-04.

More from Progress.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2000-0127, published 2000-02-03. High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days. The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
• CVE-2007-2506, published 2007-05-04. High severity, CVSS 7.8. EPSS: 4% chance of exploitation in the next 30 days. WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service (infinite loop and daemon hang) via a messenger…