Approved changes feed: RSS · Atom

cpe:2.3:a:progress:openedge_explorer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductOpenedge Explorer (c1e12b4d-efce-568a-9169-1b9f08749c0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34203 vulnerable 2026-06-03 14:52:16.058403 Details available
In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and 12.3.x through 12.6.x before 12.7.
Published: 2023-06-23T00:00:00.000Z
Updated: 2024-12-02T14:50:19.648Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.