Progress Webspeed Messenger vulnerabilities

2 CVEs affecting Progress Webspeed Messenger, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-2354, published 2007-04-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-2266, published 2007-04-25. High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days. Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking webutil/_cpyfile.p in the WService parameter to (1) cgiip.exe or (2) wsisa.dll in…
CVE-2007-2354, published 2007-04-30. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a WService parameter containing "wsbroker1/webutil/about.r", which reveals the operating system and product…