What is the ProgressSoftware CNA?

ProgressSoftware is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 150 CVE records since 2023.

How many CVEs has ProgressSoftware published?

ProgressSoftware has published 150 CVE records, including 122 in the last two years.

What is ProgressSoftware's CVE data quality grade?

RadicalNotion.AI grades ProgressSoftware's CVE data quality as A, with an overall completeness score of 99.7%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (98.7%) information.

What products does ProgressSoftware publish CVEs for?

ProgressSoftware most frequently publishes CVEs for WhatsUp Gold, LoadMaster, MOVEit Transfer, Telerik UI for ASP.NET AJAX, Telerik Reporting.

Which vendors does ProgressSoftware cover?

ProgressSoftware publishes CVEs across 7 distinct vendors, most often Progress, kemptechnologies, telerik, chef, linux.

Is ProgressSoftware actively publishing CVEs?

ProgressSoftware is currently active, based on 122 CVEs in the last two years.

What is the average severity of ProgressSoftware's CVEs?

The average CVSS base score across ProgressSoftware's scored CVEs is 7.8.

How many critical CVEs has ProgressSoftware published?

ProgressSoftware has published 54 critical-severity CVEs and 144 high-severity CVEs.

Are any of ProgressSoftware's CVEs in CISA's Known Exploited Vulnerabilities catalog?

Yes. 6 of ProgressSoftware's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.

What are the most common weakness types in ProgressSoftware's CVEs?

ProgressSoftware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How does ProgressSoftware rank among CNAs?

By total CVE volume, ProgressSoftware ranks #104 of 370 CNAs, and it reports more complete CVE records than 57% of all CNAs.

ProgressSoftware CNA: CVE Report Card & Published CVEs

Name: ProgressSoftware CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Latest CVEs

The most recent CVEs assigned by ProgressSoftware.

CVE-2026-16137CWE-22
Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller
High · CVSS 7.2
EPSS 0.5%2026-08-17
CVE-2026-16138CWE-502
Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
High · CVSS 8.0
EPSS 0.3%2026-08-17
CVE-2026-16139CWE-22
Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution
High · CVSS 7.2
EPSS 0.7%2026-08-17
CVE-2026-65941CWE-306
WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.
High · CVSS 8.8
EPSS 0.4%2026-08-12
CVE-2026-65940CWE-732
WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.
Medium · CVSS 6.8
EPSS 0.2%2026-08-12
CVE-2026-65939CWE-434
WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.
Medium · CVSS 6.8
EPSS 0.2%2026-08-12
CVE-2026-65938CWE-862
WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.
Medium · CVSS 4.3
EPSS 0.2%2026-08-12
CVE-2026-65937CWE-79
WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI
High · CVSS 8.0
EPSS 0.2%2026-08-12
CVE-2026-9203CWE-918
Server-side request forgery in Progress MarkLogic Server
High · CVSS 8.5
EPSS 0.2%2026-08-05
CVE-2026-9195CWE-79
Cross-site scripting in Progress MarkLogic Server Query Console
Critical · CVSS 9.3
EPSS 0.4%2026-08-05
CVE-2026-9193CWE-269
Privilege escalation in Progress MarkLogic Server Hadoop integration
Critical · CVSS 9.9
EPSS 0.3%2026-08-05
CVE-2026-9192CWE-287
Authentication bypass in Progress MarkLogic Server ODBC App Server
Critical · CVSS 9.8
EPSS 0.6%2026-08-05

Track new ProgressSoftware CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor ProgressSoftware CVEs

Frequently asked questions

Common questions about the ProgressSoftware CNA.

What is the ProgressSoftware CNA?: ProgressSoftware is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 150 CVE records since 2023.
How many CVEs has ProgressSoftware published?: ProgressSoftware has published 150 CVE records, including 122 in the last two years.
What is ProgressSoftware's CVE data quality grade?: RadicalNotion.AI grades ProgressSoftware's CVE data quality as A, with an overall completeness score of 99.7%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (98.7%) information.
What products does ProgressSoftware publish CVEs for?: ProgressSoftware most frequently publishes CVEs for WhatsUp Gold, LoadMaster, MOVEit Transfer, Telerik UI for ASP.NET AJAX, Telerik Reporting.
Which vendors does ProgressSoftware cover?: ProgressSoftware publishes CVEs across 7 distinct vendors, most often Progress, kemptechnologies, telerik, chef, linux.
Is ProgressSoftware actively publishing CVEs?: ProgressSoftware is currently active, based on 122 CVEs in the last two years.
What is the average severity of ProgressSoftware's CVEs?: The average CVSS base score across ProgressSoftware's scored CVEs is 7.8.
How many critical CVEs has ProgressSoftware published?: ProgressSoftware has published 54 critical-severity CVEs and 144 high-severity CVEs.
Are any of ProgressSoftware's CVEs in CISA's Known Exploited Vulnerabilities catalog?: Yes. 6 of ProgressSoftware's CVEs are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning they are confirmed to be exploited in the wild.
What are the most common weakness types in ProgressSoftware's CVEs?: ProgressSoftware's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-502 (Deserialization of Untrusted Data), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
How does ProgressSoftware rank among CNAs?: By total CVE volume, ProgressSoftware ranks #104 of 370 CNAs, and it reports more complete CVE records than 57% of all CNAs.

ProgressSoftware

Overview

Data quality report card

What these scores mean

Severity and exploitation

Common weakness types

Publishing activity by year

Top vendors

Top products

Latest CVEs

Other CNAs

Frequently asked questions

References

Track ProgressSoftware CVEs