Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Progress Software Telerik UI for WPF 2024.3.924 Clear all filters
TI-2024-07021 CVE-2024-7576 · GHSA-3x94-47mg-35rf

Progress UI for WPF format provider unsafe deserialization vulnerability

Priority MEDIUM 43

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2024-09-25 Fixed in 2024.3.924 CWE-502
TI-2024-07020 CVE-2024-7575 · GHSA-jp9w-w77g-78h3

Improper neutralization special element in hyperlinks

Priority MEDIUM 44

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00703 Published 2024-09-25 Fixed in 2024.3.924 CWE-77