Read the docs

Telerik

Records17All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Telerik records in CISA KEV
TI-2024-04060 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2024-06-13TI-2017-08395 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Priority CRITICAL 100KEV 2023-01-26TI-2017-08355 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Priority CRITICAL 100KEV 2022-04-11TI-2017-06690 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-13651 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Ui For Wpf 6 records MEDIUM Ui For Asp.net Ajax 3 records CRITICAL Analytics Monitor Library 1 record LOW Asp.net Ajax Radeditor Control 1 record LOW Fiddler 1 record MEDIUM Justassembly 1 record LOW Justdecompile 1 record LOW Radchart 1 record MEDIUM

Records

1 record in Radchart · all components

TI-2019-14262 CVE-2019-19790 · GHSA-fm5g-pj4j-pr3h

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to…

Priority MEDIUM 48

Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG, .PNG, .TIFF, or .WMF on the server through a specially crafte…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02991 Published 2019-12-13 No fix listed CWE-22
Open these records in search →