Approved changes feed: RSS · Atom

cpe:2.3:a:progress:ecs_connection_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductEcs Connection Manager (628a13e4-fbc8-52a8-b3e7-242abff48ebf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4048 vulnerable 2026-06-08 08:05:12.536531 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process.
Published: 2026-04-20T13:36:49.475Z
Updated: 2026-04-22T03:55:54.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3519 vulnerable 2026-06-08 08:01:18.910931 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command
Published: 2026-04-20T13:32:50.259Z
Updated: 2026-04-22T03:55:53.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3518 vulnerable 2026-06-08 08:01:18.906434 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command
Published: 2026-04-20T13:29:33.794Z
Updated: 2026-04-22T03:55:52.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3517 vulnerable 2026-06-08 08:01:18.903854 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command
Published: 2026-04-20T13:22:54.867Z
Updated: 2026-04-22T03:55:51.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13447 vulnerable 2026-06-08 07:04:32.216058 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the API input parameters
Published: 2026-01-13T14:31:56.911Z
Updated: 2026-02-26T15:04:45.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13444 vulnerable 2026-06-08 07:04:32.206865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.