Approved changes feed: RSS · Atom

cpe:2.3:a:progress:progress:9.1e:*:*:*:*:*:*:*

part: a version: 9.1e update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductProgress (f37c2a20-9c74-5659-add1-9783e19d250b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2506 vulnerable 2026-06-03 14:28:08.462378 Details available
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service (infinite loop and daemon hang) via a messenger URL that invokes _edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or wsisa.dll with WService=wsbroker1/_edit.r in the PATH_INFO.
Published: 2007-05-04T01:00:00.000Z
Updated: 2024-08-07T13:42:33.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2417 vulnerable 2026-06-03 14:28:08.175843 Details available
Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491.
Published: 2007-07-15T21:00:00.000Z
Updated: 2024-08-07T13:33:29.104Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.