CVE-2025-7388

published 2025-09-04

CVE-2025-7388: It was possible to perform Remote Command Execution (RCE) via Java RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and…

Priority P2 60 high 8.4 CVSS 3.1

AV N AC H PR L UI N S C C H I H A L

It was possible to perform Remote Command Execution (RCE) via Java
RMI interface in the OpenEdge AdminServer, allowing authenticated users to inject and
execute OS commands under the delegated authority of the AdminServer process. An RMI interface permitted manipulation of a configuration
property with inadequate input validation leading to OS command injection.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
progress_software_corporation	openedge	>= OpenEdge 12.2.0 < 12.2.18	12.2.18
progress_software_corporation	openedge	>= OpenEdge 12.8.0 < 12.8.8	12.8.8

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77