Read the docs

Telerik

Records17All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Telerik records in CISA KEV
TI-2024-04060 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2024-06-13TI-2017-08395 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Priority CRITICAL 100KEV 2023-01-26TI-2017-08355 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Priority CRITICAL 100KEV 2022-04-11TI-2017-06690 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-13651 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Ui For Wpf 6 records MEDIUM Ui For Asp.net Ajax 3 records CRITICAL Analytics Monitor Library 1 record LOW Asp.net Ajax Radeditor Control 1 record LOW Fiddler 1 record MEDIUM Justassembly 1 record LOW Justdecompile 1 record LOW Radchart 1 record MEDIUM

Records

3 records in Ui For Asp.net Ajax · all components

TI-2017-08355 CVE-2017-11317 · GHSA-9v96-j7x8-6wjv

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2…

Priority CRITICAL 100KEV

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary co…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.84175 Published 2017-08-23 No fix listed CWE-326
TI-2017-06690 CVE-2017-9248 · GHSA-mfqq-q5rf-3hvq

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and…

Priority CRITICAL 100KEV

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it eas…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.75098 Published 2017-07-03 No fix listed CWE-522
Open these records in search →