Progress Software ECS Connection Manager

5 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-596907.2.60.0 – < 7.2.63.3Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows P…HIGH 8.00.3 %
CVE-2026-596897.2.60.0 – < 7.2.63.3Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Esca…HIGH 8.00.3 %
CVE-2026-596887.2.60.0 – < 7.2.63.3Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Func…HIGH 8.41.7 %
CVE-2026-596877.2.60.0 – < 7.2.63.3Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Manage…HIGH 8.41.7 %
CVE-2026-596867.2.60.0 – < 7.2.63.3Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management InterfaceHIGH 8.41.7 %