CVE-2015-9245: Critical severity progress openedge explorer vulnerability

Published Oct 31, 2017

Updated

Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.

Affected Software

10 affected components

Progress OpenEdge=10.2a

Progress OpenEdge=10.2b

Progress OpenEdge=10.2b07

Progress OpenEdge=10.2b08

Progress OpenEdge=11.0

Progress OpenEdge=11.1

Progress OpenEdge=11.2

Progress OpenEdge=11.3

Progress OpenEdge=11.4

Progress OpenEdge=11.5

Event History

Oct 31, 2017

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-9245?

CVE-2015-9245 is rated as a high severity vulnerability due to the potential for unauthenticated remote code execution.

How do I fix CVE-2015-9245?

To fix CVE-2015-9245, configure the Progress OpenEdge to disable the insecure Java RMI settings and restrict URL class loading.

Which products are affected by CVE-2015-9245?

CVE-2015-9245 affects Progress Software OpenEdge versions 10.2a, 10.2b, and all versions from 11.0 to 11.5.

Can CVE-2015-9245 be exploited remotely?

Yes, CVE-2015-9245 can be exploited remotely by attackers to load and execute malicious Java classes.

Is CVE-2015-9245 related to Java security?

Yes, CVE-2015-9245 is related to Java security as it involves the insecure configuration of Java RMI class loading.