Advisories · Technology
Progress Software Telerik UI for ASP.NET AJAX.
Every CVE that names Progress Software Telerik UI for ASP.NET AJAX among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Unrestricted file upload
- CWE-345
- CVSS 7.5 High
RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Path traversal
- CVSS 6.5 Medium
Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
- Progress Software Telerik UI for ASP.NET AJAX
- Hard-coded credentials
- CVSS 5.3 Medium
XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Denial of service
- CVSS 6.5 Medium
RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Server-side request forgery (SSRF)
- CVSS 8.1 High
PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Insecure deserialization
- CVSS 7.5 High
SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Path traversal
- CVSS 5.9 Medium
DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- CWE-345
- CVSS 8.1 High
DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Code injection
- CVSS 8.1 High
AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Path traversal
- CVSS 8.1 High
PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Insecure deserialization
- CVSS 7.5 High
RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Hard-coded credentials
- CVSS 7.5 High
RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- CWE-208
- CVSS 7.5 High
RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Information disclosure
- CVSS 8.1 High
RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Code injection
- CVSS 8.1 High
Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Insecure deserialization
- CVSS 7.5 High
Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Denial of service
- CVSS 5.3 Medium
Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- CWE-331
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX
- Progress Software Telerik UI for ASP.NET AJAX
- Code injection