Vulnerability Database
299,584
Total vulnerabilities in the database
CVE-2023-40051
This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0. An attacker can formulate a request for a WEB transport that allows unintended file uploads to a server directory path on the system running PASOE. If the upload contains a payload that can further exploit the server or its network, the launch of a larger scale attack may be possible.
| Software | From | Fixed in |
|---|---|---|
| progress / openedge | 11.7 | 11.7.18 |
| progress / openedge | 12.2 | 12.2.13 |
| progress / openedge_innovation | - | 12.8.0 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime