Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Progress Component: Connection Manager For Objectscale Clear all filters
TI-2026-42566 CVE-2026-59690 · GHSA-68jj-c942-f24v

Missing authorization in Progress LoadMaster

Priority LOW 36

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00257 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 +1 CWE-862
TI-2026-42565 CVE-2026-59689 · GHSA-xm37-wf3w-9rh5

Incorrect authorization in Progress LoadMaster

Priority LOW 36

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privilege…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00257 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-863
TI-2026-42564 CVE-2026-59688 · GHSA-c7jf-f6hx-vphp

OS command injection in Progress LoadMaster

Priority MEDIUM 42

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary op…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01677 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-78
TI-2026-42563 CVE-2026-59687 · GHSA-9x4p-3pwq-9h9m

OS command injection in Progress LoadMaster

Priority MEDIUM 42

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary op…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01677 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-78
TI-2026-42562 CVE-2026-59686 · GHSA-85mv-2c69-64f5

OS command injection in Progress LoadMaster

Priority MEDIUM 42

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary op…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01677 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-78
TI-2026-07083 CVE-2026-8037 · GHSA-57pc-jm9r-hgj4

Command injection in Progress LoadMaster

Priority CRITICAL 100KEV

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in mu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99794 Published 2026-06-04 Fixed in V7.2.63.2, V7.2.54.18 CWE-77
TI-2026-03506 CVE-2026-4048 · GHSA-pwx9-99jm-fx95

Command injection in Progress LoadMaster

Priority MEDIUM 43

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsa…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.02132 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-03032 CVE-2026-3519 · GHSA-g4q4-3mm2-2w69

Command injection in Progress LoadMaster

Priority MEDIUM 43

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.02134 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-03031 CVE-2026-3518 · GHSA-wvwg-7g9q-g3v4

Command injection in Progress LoadMaster

Priority MEDIUM 55

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting uns…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.16877 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-03030 CVE-2026-3517 · GHSA-rw4j-jhfh-fr2h

Command injection in Progress LoadMaster

Priority MEDIUM 54

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.15488 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2025-12291 CVE-2025-13444 · GHSA-xfx9-x566-2hwr

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

Priority MEDIUM 61

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.27217 Published 2026-01-13 Fixed in V7.2.62.2, V7.2.54.16 +1 CWE-78