Telerik Ui For Asp.net Ajax — known CVE vulnerabilities

Every CVE whose affected-product data names Telerik Ui For Asp.net Ajax, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-11317 — CVSS 9.8 (critical) — actively exploited: Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which…
• CVE-2017-9248 — CVSS 9.8 (critical) — actively exploited: Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect…
• CVE-2019-18935 — CVSS 9.8 (critical) — actively exploited: Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This…