CVEvulnerability

CVE-2015-9245

9.8 CRITICAL Published 2017-10-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-10-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-284

Description

Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.

Affected configurations

• progress openedge 10.2a • progress openedge 10.2b • progress openedge 10.2b07 • progress openedge 10.2b08 • progress openedge 11.0 • progress openedge 11.1 • progress openedge 11.2 • progress openedge 11.3 • progress openedge 11.4 • progress openedge 11.5

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References