Product by Progress
Progress Software Kendo UI for jQuery
14 known vulnerabilities in Progress Software Kendo UI for jQuery (Progress), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-108116 | MDX and SOAP Injection in Kendo UI for jQuery | 7.5 | |
| Medium | CVE-2018-14037 | Progress Kendo UI: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2026-106163 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser | 6.5 | |
| Medium | CVE-2026-106160 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery | 5.4 | |
| Medium | CVE-2026-106153 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar | 5.4 | |
| Medium | CVE-2026-106151 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery | 5.4 | |
| Medium | CVE-2026-106149 | Cross-site Scripting (XSS) in Kendo UI for jQuery Menu | 5.4 | |
| Medium | CVE-2026-106161 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery | 5.4 | |
| Medium | CVE-2026-106148 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery | 5.4 | |
| Medium | CVE-2026-106147 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery | 5.4 | |
| Medium | CVE-2026-106159 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery | 4.7 | |
| Medium | CVE-2026-106158 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery | 4.7 | |
| Medium | CVE-2026-106157 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery | 4.7 | |
| Medium | CVE-2026-106162 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery | 4.7 |