Read the docs

Telerik

Records17All Threatist records
Exploited (KEV)5In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Telerik records in CISA KEV
TI-2024-04060 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2024-06-13TI-2017-08395 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability Priority CRITICAL 100KEV 2023-01-26TI-2017-08355 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability Priority CRITICAL 100KEV 2022-04-11TI-2017-06690 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Priority CRITICAL 100KEV 2021-11-03TI-2019-13651 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Ui For Wpf 6 records MEDIUM Ui For Asp.net Ajax 3 records CRITICAL Analytics Monitor Library 1 record LOW Asp.net Ajax Radeditor Control 1 record LOW Fiddler 1 record MEDIUM Justassembly 1 record LOW Justdecompile 1 record LOW Radchart 1 record MEDIUM

Records

6 records in Ui For Wpf · all components

TI-2024-09358 CVE-2024-10095 · GHSA-3gpq-5q6x-q7pf

Progress UI for WPF format provider unsafe deserialization vulnerability

Priority MEDIUM 44

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0075 Published 2024-12-16 Fixed in 2024.4.1213 CWE-502
TI-2024-07020 CVE-2024-7575 · GHSA-jp9w-w77g-78h3

Improper neutralization special element in hyperlinks

Priority MEDIUM 44

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2024-09-25 Fixed in 2024.3.924 CWE-77
TI-2024-07021 CVE-2024-7576 · GHSA-3x94-47mg-35rf

Progress UI for WPF format provider unsafe deserialization vulnerability

Priority MEDIUM 43

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2024-09-25 Fixed in 2024.3.924 CWE-502
TI-2024-07118 CVE-2024-7679 · GHSA-4wh3-4hcw-ph3f

Improper neutralization special element in hyperlinks

Priority LOW 37

In Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00744 Published 2024-09-25 Fixed in 2024.3.924 CWE-77
Open these records in search →