Product by Progress

    Progress Software Telerik UI for ASP.NET AJAX

    21 known vulnerabilities in Progress Software Telerik UI for ASP.NET AJAX (Progress), 1 of them actively exploited (CISA KEV).

    Key figures

    21

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Progress Software Telerik UI for ASP.NET AJAX (Progress)
    CriticalCVE-2017-11357

    Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

    In CISA KEVRansomware

    		9.8
    HighCVE-2025-3600

    Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		7.5
    CriticalCVE-2019-19790

    Progress Software Telerik UI for ASP.NET AJAX: Path Traversal

    also in 1 other product

    		9.8
    CriticalCVE-2021-28141

    Progress Software Telerik UI for ASP.NET AJAX: security vulnerability

    		9.8
    HighCVE-2026-13181

    RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		8.1
    HighCVE-2026-13186

    AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		8.1
    HighCVE-2026-13185

    PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		8.1
    CriticalCVE-2026-6023

    Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		9.8
    HighCVE-2026-13190

    PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		8.1
    HighCVE-2026-13183

    RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		7.5
    HighCVE-2026-13182

    RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		7.5
    HighCVE-2026-13187

    DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		8.1
    Not ratedCVE-2014-2217

    Progress Software Telerik UI for ASP.NET AJAX: Path Traversal

    		—
    HighCVE-2026-13189

    SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		7.5
    MediumCVE-2026-13192

    RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		6.5
    HighCVE-2026-13184

    RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		7.5
    MediumCVE-2026-14932

    Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart

    also in 1 other product

    		6.5
    MediumCVE-2026-14865

    XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		5.3
    HighCVE-2026-6022

    Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		7.5
    MediumCVE-2026-13188

    DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		5.9
    MediumCVE-2026-2878

    Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX

    also in 1 other product

    		5.3

    All products by Progress