Read the docs

Telerik

Records17All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Telerik records in CISA KEV
TI-2024-04060 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2024-06-13TI-2017-08395 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Priority CRITICAL 100KEV 2023-01-26TI-2017-08355 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Priority CRITICAL 100KEV 2022-04-11TI-2017-06690 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-13651 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Ui For Wpf 6 records MEDIUM Ui For Asp.net Ajax 3 records CRITICAL Analytics Monitor Library 1 record LOW Asp.net Ajax Radeditor Control 1 record LOW Fiddler 1 record MEDIUM Justassembly 1 record LOW Justdecompile 1 record LOW Radchart 1 record MEDIUM

Records

1 record in Asp.net Ajax Radeditor Control · all components

TI-2014-04069 CVE-2014-4958 · GHSA-v23c-hjph-j9r7

Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in Telerik UI for ASP.NET AJAX RadEditor control 2014.1.403.35, 2009.3.1208.20, and other versions allows remote attackers to inject arbitrary web script or HTML via CSS expressio…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01979 Published 2014-09-26 No fix listed CWE-79
Open these records in search →