{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T08:25:00.743","vulnerabilities":[{"cve":{"id":"CVE-2024-7345","sourceIdentifier":"security@progress.com","published":"2024-09-03T15:15:16.707","lastModified":"2026-06-17T08:19:54.567","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents on supported OpenEdge LTS platforms up to OpenEdge LTS 11.7.18 and LTS 12.2.13 on all supported release platforms"},{"lang":"es","value":"La omisión por parte del cliente ABL local de las comprobaciones de seguridad PASOE requeridas puede permitir que un atacante realice una inyección de código no autorizada en agentes multisesión en plataformas OpenEdge LTS compatibles hasta OpenEdge LTS 11.7.18 y LTS 12.2.13 en todas las plataformas de lanzamiento compatibles"}],"affected":[{"source":"security@progress.com","affectedData":[{"vendor":"Progress","product":"OpenEdge","defaultStatus":"affected","modules":["PASOE Application Server","OpenEdge Authentication Gateway"],"platforms":["Windows","Linux","64 bit","x86","32 bit"],"versions":[{"version":"11.7.0","lessThanOrEqual":"11.7.19","versionType":"custom","status":"affected"},{"version":"12.2.0","lessThanOrEqual":"12.2.14","versionType":"custom","status":"affected"},{"version":"12.8.0","versionType":"custom","status":"unaffected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"progress","product":"openedge","defaultStatus":"affected","cpes":["cpe:2.3:a:progress:openedge:*:*:*:*:*:*:*:*"],"versions":[{"version":"11.7.0","lessThanOrEqual":"11.7.19","versionType":"custom","status":"affected"},{"version":"12.2.0","lessThanOrEqual":"12.2.14","versionType":"custom","status":"affected"},{"version":"12.8.0","status":"unaffected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@progress.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":8.3,"baseSeverity":"HIGH","attackVector":"ADJACENT_NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.6,"impactScore":6.0},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","baseScore":9.6,"baseSeverity":"CRITICAL","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":6.0}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-09-03T15:06:48.221094Z","id":"CVE-2024-7345","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security@progress.com","type":"Secondary","description":[{"lang":"en","value":"CWE-94"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:progress:openedge:*:*:*:*:*:*:*:*","versionEndIncluding":"11.7.18","matchCriteriaId":"4E38EE20-1A60-46BB-8045-965B60B09B68"},{"vulnerable":true,"criteria":"cpe:2.3:a:progress:openedge:*:*:*:*:*:*:*:*","versionStartIncluding":"12.0","versionEndIncluding":"12.2.13","matchCriteriaId":"EE560C37-3845-4B18-BDDC-38FF65C4CA2C"}]}]}],"references":[{"url":"https://community.progress.com/s/article/Direct-local-client-connections-to-MS-Agents-can-bypass-authentication","source":"security@progress.com","tags":["Mitigation","Vendor Advisory"]}]}}]}