Unrated severityNVD Advisory· Published May 4, 2007· Updated Jun 16, 2026

CVE-2007-2506

Description

WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service (infinite loop and daemon hang) via a messenger URL that invokes _edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or wsisa.dll with WService=wsbroker1/_edit.r in the PATH_INFO.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Progress (organisation)/Progress
cpe:2.3:a:progress:progress:9.1e:*:*:*:*:*:*:*
Progress (organisation)/Webspeed4 versions
cpe:2.3:a:progress:webspeed:3.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:progress:webspeed:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:progress:webspeed:3.1a:*:*:*:*:*:*:*
- cpe:2.3:a:progress:webspeed:3.1d:*:*:*:*:*:*:*
- cpe:2.3:a:progress:webspeed:3.1e:*:*:*:*:*:*:*
Process Software/WebSpeedllm-create
Range: 3.x
Process Software/Progress 9.1Ellm-fuzzy
Range: 9.1e (and other 9.x)
Process Software/OpenEdge 10.1xllm-fuzzy
Range: 10.x

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/23778nvdExploitPatch
secunia.com/advisories/25129nvdVendor Advisory
osvdb.org/35541nvd
progress.atgnow.com/esprogress/resultDisplay.donvd
www.ishare.nlnvd
www.securityfocus.com/archive/1/467375/100/0/threadednvd
www.securityfocus.com/archive/1/467376/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000