Advisories · Technology
Progress Software MOVEit WAF.
Every CVE that names Progress Software MOVEit WAF among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API
- Progress Software LoadMaster
- Progress Software ECS Connection Manager
- Broken access control
- CVSS 8.0 High
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
- Progress Software LoadMaster
- Progress Software ECS Connection Manager
- Broken access control
- CVSS 8.4 High
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
- Progress Software LoadMaster
- Progress Software ECS Connection Manager
- Command injection
- CVSS 8.4 High
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
- Progress Software LoadMaster
- Progress Software ECS Connection Manager
- Command injection
- CVSS 8.4 High
Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
- Progress Software LoadMaster
- Progress Software ECS Connection Manager
- Command injection
- CVSS 9.6 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- Progress Software LoadMaster
- Progress Software ECS Connections Manager
- Command injection
- CVSS 8.4 High
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- Progress Software LoadMaster
- Progress Software ECS Connections Manager
- Command injection
- CVSS 8.4 High
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- Progress Software LoadMaster
- Progress Software ECS Connections Manager
- Command injection
- CVSS 8.4 HighCritical · CVSS 7+ and EPSS
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- Progress Software LoadMaster
- Progress Software ECS Connections Manager
- Command injection
- CVSS 8.4 HighCritical · CVSS 7+ and EPSS
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
- Progress Software LoadMaster
- Progress Software ECS Connections Manager
- Command injection