Progress Software Vulnerabilities and Affected Products
Vulnerabilities associated with Telerik UI for WPF.
Products
Clear product- Telerik UI for ASP.NET AJAX17 vulnerabilities
- LoadMaster15 vulnerabilities
- MOVEit WAF10 vulnerabilities
- Object Scale Connection Manager10 vulnerabilities
- Flowmon7 vulnerabilities
- MOVEit Automation6 vulnerabilities
- ECS Connection Manager5 vulnerabilities
- ECS Connections Manager5 vulnerabilities
- Sitefinity5 vulnerabilities
- Telerik Reporting5 vulnerabilities
- Telerik UI for WPF5 vulnerabilities
- Flowmon ADS4 vulnerabilities
- Telerik Report Server3 vulnerabilities
- Chef Automate2 vulnerabilities
- Hybrid Data Pipeline2 vulnerabilities
- Telerik Document Processing Libraries2 vulnerabilities
- Telerik UI for WinForms2 vulnerabilities
- Chef Inspec1 vulnerability
- Kendo UI for Angular1 vulnerability
- Kendo UI for jQuery1 vulnerability
- KendoReact1 vulnerability
- MOVEit Transfer1 vulnerability
- Multi Tenant1 vulnerability
- Multi Tenant LoadMaster1 vulnerability
- Progress® Telerik® Document Processing Libraries1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-10095HIGH | Progress UI for WPF format provider unsafe deserialization vulnerabilityIn Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502Dec 16, 2024 | CVSS8.4v3.1 | EPSS0.743% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-10012HIGH | Progress UI for WPF format provider unsafe deserialization vulnerabilityIn Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502Nov 13, 2024 | CVSS7.8v3.1 | EPSS0.229% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-8316HIGH | Progress UI for WPF format provider unsafe deserialization vulnerabilityIn Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502Sep 25, 2024 | CVSS7.8v3.1 | EPSS0.246% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-7576HIGH | Progress UI for WPF format provider unsafe deserialization vulnerabilityIn Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502Sep 25, 2024 | CVSS7.8v3.1 | EPSS0.449% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-7575HIGH | Improper neutralization special element in hyperlinksIn Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements. CWE-77Sep 25, 2024 | CVSS7.8v3.1 | EPSS0.682% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |