CVE-2023-40052CWE-119

Progress Application Server (PAS) for OpenEdge Denial of Service

High · published January 18, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation releases prior to 12.8.0

.

An attacker who can produce a malformed web request may cause the crash of a PASOE agent potentially disrupting the thread activities of many web application clients. Multiple of these DoS attacks could lead to the flooding of invalid requests as compared to the server’s remaining ability to process valid requests.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00570 · 46.4th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2024-01-18T15:11Z
EPSS history
Timeline
  • 18 JAN 15:11Z
    Progress Application Server (PAS) for OpenEdge Denial of Service
    cvelistv5