Approved changes feed: RSS · Atom

cpe:2.3:a:progress:openedge_management:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductOpenedge Management (6e97c282-ef4a-540d-ac4d-504b82cee701)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-34203 vulnerable 2026-06-03 14:52:16.059780 Details available
In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change identity or role membership, e.g., escalate to admin. This affects OpenEdge LTS before 11.7.16, 12.x before 12.2.12, and 12.3.x through 12.6.x before 12.7.
Published: 2023-06-23T00:00:00.000Z
Updated: 2024-12-02T14:50:19.648Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.