VULNERABILITY INTELLIGENCE

CVE-2015-9245

CVSS score9.8 CRITICAL
EPSS probability1.86%
CISA KEVNot currently listed
Published2017-10-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.

Weakness classification

  • CWE-284: Improper Access Control

Primary references