Approved changes feed: RSS · Atom

cpe:2.3:a:progress_software:ecs_connections_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress Software (96c4320b-2c72-5331-bd5a-d39d72393793)
ProductEcs Connections Manager (81cc9842-c7db-5789-8b63-8d70709f8d17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4048 vulnerable 2026-06-03 15:26:24.251078 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in a custom WAF rule file during the file upload process.
Published: 2026-04-20T13:36:49.475Z
Updated: 2026-04-22T03:55:54.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3519 vulnerable 2026-06-03 15:23:32.855036 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'aclcontrol' command
Published: 2026-04-20T13:32:50.259Z
Updated: 2026-04-22T03:55:53.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3518 vulnerable 2026-06-03 15:23:32.854291 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'killsession' command
Published: 2026-04-20T13:29:33.794Z
Updated: 2026-04-22T03:55:52.242Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3517 vulnerable 2026-06-03 15:23:32.843898 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
HIGH (8.4)
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in the 'addcountry' command
Published: 2026-04-20T13:22:54.867Z
Updated: 2026-04-22T03:55:51.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.