Vulnerabilities > Progress > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-02-28 | CVE-2024-1636 | Cross-site Scripting vulnerability in Progress Sitefinity Potential Cross-Site Scripting (XSS) in the page editing area. | 5.4 |
| 2024-02-21 | CVE-2024-1474 | Cross-site Scripting vulnerability in Progress WS FTP Server In WS_FTP Server versions before 8.8.5, reflected cross-site scripting issues have been identified on various user supplied inputs on the WS_FTP Server administrative interface. | 6.1 |
| 2023-12-20 | CVE-2023-6784 | Unspecified vulnerability in Progress Sitefinity A malicious user could potentially use the Sitefinity system for the distribution of phishing emails. | 4.3 |
| 2023-12-14 | CVE-2023-6364 | Cross-site Scripting vulnerability in Progress Whatsup Gold In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. It is possible for an attacker to craft a XSS payload and store that value within a dashboard component. If a WhatsUp Gold user interacts with the crafted payload, the attacker would be able to execute malicious JavaScript within the context of the victims browser. | 5.4 |
| 2023-12-14 | CVE-2023-6365 | Cross-site Scripting vulnerability in Progress Whatsup Gold In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. | 5.4 |
| 2023-12-14 | CVE-2023-6366 | Cross-site Scripting vulnerability in Progress Whatsup Gold In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. | 5.4 |
| 2023-12-14 | CVE-2023-6367 | Cross-site Scripting vulnerability in Progress Whatsup Gold In WhatsUp Gold versions released before 2023.1, a stored cross-site scripting (XSS) vulnerability has been identified. | 5.4 |
| 2023-12-14 | CVE-2023-6368 | Unspecified vulnerability in Progress Whatsup Gold In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. | 5.3 |
| 2023-12-14 | CVE-2023-6595 | Unspecified vulnerability in Progress Whatsup Gold In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. | 5.3 |
| 2023-11-29 | CVE-2023-6217 | Cross-site Scripting vulnerability in Progress Moveit Transfer In Progress MOVEit Transfer versions released before 2022.0.9 (14.0.9), 2022.1.10 (14.1.10), 2023.0.7 (15.0.7), a reflected cross-site scripting (XSS) vulnerability has been identified when MOVEit Gateway is used in conjunction with MOVEit Transfer. An attacker could craft a malicious payload targeting the system which comprises a MOVEit Gateway and MOVEit Transfer deployment. | 6.1 |