Vendor

    Progress Software

    16 known vulnerabilities in products by Progress Software, 4 of them actively exploited (CISA KEV).

    Key figures

    16

    Vulnerabilities

    4

    Actively exploited (KEV)

    1

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Progress Software
    CriticalCVE-2019-18935

    Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2024-4358

    Registration Authentication Bypass Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2017-11317

    Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2017-9248

    Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2019-19790

    Progress Software Telerik UI for ASP.NET AJAX: Path Traversal

    also in 1 other product

    		9.8
    HighCVE-2020-13661

    Progress Software Fiddler: security vulnerability

    		8.8
    HighCVE-2018-15122

    Telerik JustAssembly: security vulnerability

    		7.8
    HighCVE-2020-11414

    Progress Software UI For Silverlight: security vulnerability

    		7.5
    CriticalCVE-2024-10095

    Progress UI for WPF format provider unsafe deserialization vulnerability

    also in 2 other products

    		8.4
    HighCVE-2024-7679

    Improper neutralization special element in hyperlinks

    also in 1 other product

    		7.8
    CriticalCVE-2024-7575

    Improper neutralization special element in hyperlinks

    also in 1 other product

    		7.8
    CriticalCVE-2024-7576

    Progress UI for WPF format provider unsafe deserialization vulnerability

    also in 1 other product

    		7.8
    Not ratedCVE-2014-4958

    Telerik ASP.NET AJAX RadEditor Control: Cross-Site Scripting (XSS)

    		—
    HighCVE-2024-8316

    Progress UI for WPF format provider unsafe deserialization vulnerability

    also in 1 other product

    		7.8
    HighCVE-2024-10012

    Progress UI for WPF format provider unsafe deserialization vulnerability

    also in 1 other product

    		7.8
    Not ratedCVE-2015-2264

    Telerik Analytics Monitor Library: Privilege Escalation

    		—

    Products

    Products by Progress Software
    Progress Software Telerik UI for WPF60
    Progress Telerik UI for ASP.NET AJAX33