Read the docs

Ajaxpro.2 Project

Records1All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Ajaxpro.2 Project records in CISA KEV
TI-2021-06186 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records
Ajaxpro.2 1 record CRITICAL

Records

1 record in Ajaxpro.2 · all components

TI-2021-06186 CVE-2021-23758 · GHSA-6r7c-6w96-8pvw

Deserialization of untrusted data in AjaxPro.2

Priority CRITICAL 100KEV

All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.82578 Published 2021-12-03 Fixed in 21.11.29.1 CWE-502
Open these records in search →