[ Vendor · 4 CVEs ]
Telerik
CVEs affecting Telerik published in the last 30 days, plus any Telerik CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2019-18935 | 11 Dec 2019 | CVSS 9.8 | Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted DataProgress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is… | ExploitedFix |
| CVE-2017-11317 | 23 Aug 2017 | CVSS 9.8 | Telerik UI for ASP.NET AJAX Unrestricted File UploadTelerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows… | Exploited |
| CVE-2017-11357 | 23 Aug 2017 | CVSS 9.8 | Telerik UI for ASP.NET AJAX Insecure Direct Object ReferenceProgress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to… | Exploited |
| CVE-2017-9248 | 3 Jul 2017 | CVSS 9.8 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic WeaknessTelerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect… | Exploited |