cvedb.io
CVE-2015-9245
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-10-31T07:29:00.190 · Last modified 2026-06-17T00:36:07.617

Summary

Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.

Affected products

progress — openedge

Does this affect you?

Add your gear to cvedb and we'll alert you only when progress ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.