Telerik Ui_for_asp.net_ajax
3 CVEs affecting Telerik Ui_for_asp.net_ajax. Latest disclosed: 2019-12-11. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18935 | Critical | 9.8 | 2019-12-11 | Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when… |
CVE-2017-11317 | Critical | 9.8 | 2017-08-23 | Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attack… |
CVE-2017-9248 | Critical | 9.8 | 2017-07-03 | Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.Dialog… |