Approved changes feed: RSS · Atom

cpe:2.3:a:progress:loadmaster:7.1.35.10:*:*:*:mt:*:*:*

part: a version: 7.1.35.10 update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductLoadmaster (461d78a5-017f-532b-8e4c-b055948a7b66)
Edition*
Language*
Software editionmt
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2449 vulnerable 2026-06-03 14:55:29.274336 LoadMaster Cross-Site Request Forgery (CSRF)
HIGH (7.5)
A cross-site request forgery vulnerability has been identified in LoadMaster.  It is possible for a malicious actor, who has prior knowledge of the IP or hostname of a specific LoadMaster, to direct an authenticated LoadMaster administrator to a third-party site. In such a scenario, the CSRF payload hosted on the malicious site would execute HTTP transactions on behalf of the LoadMaster administrator.
Published: 2024-03-22T13:35:39.103Z
Updated: 2024-08-12T19:23:36.632Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2448 vulnerable 2026-06-03 14:55:29.270771 LoadMaster Command Injection Vulnerability
HIGH (8.4)
An OS command injection vulnerability has been identified in LoadMaster.  An authenticated UI user with any permission settings may be able to inject commands into a UI component using a shell command resulting in OS command injection.
Published: 2024-03-22T13:32:43.657Z
Updated: 2024-11-15T20:05:31.723Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.