Vulnerability Database

299,584

Total vulnerabilities in the database

CVE-2024-1403

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified.  The vulnerability is a bypass to authentication based on a failure to properly handle username and password. Certain unexpected content passed into the credentials can lead to unauthorized access without proper authentication.  

  • Published: Feb 27, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-1403
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Software From Fixed in
progress / openedge 12.3 12.8.1
progress / openedge 11.8 12.2.14
progress / openedge - 11.7.19