Progress Software Vulnerabilities and Affected Products
Vulnerabilities associated with Telerik UI for WinForms.
Products
Clear product- Telerik UI for ASP.NET AJAX17 vulnerabilities
- LoadMaster15 vulnerabilities
- MOVEit WAF10 vulnerabilities
- Object Scale Connection Manager10 vulnerabilities
- Flowmon7 vulnerabilities
- MOVEit Automation6 vulnerabilities
- ECS Connection Manager5 vulnerabilities
- ECS Connections Manager5 vulnerabilities
- Sitefinity5 vulnerabilities
- Telerik Reporting5 vulnerabilities
- Telerik UI for WPF5 vulnerabilities
- Flowmon ADS4 vulnerabilities
- Telerik Report Server3 vulnerabilities
- Chef Automate2 vulnerabilities
- Hybrid Data Pipeline2 vulnerabilities
- Telerik Document Processing Libraries2 vulnerabilities
- Telerik UI for WinForms2 vulnerabilities
- Chef Inspec1 vulnerability
- Kendo UI for Angular1 vulnerability
- Kendo UI for jQuery1 vulnerability
- KendoReact1 vulnerability
- MOVEit Transfer1 vulnerability
- Multi Tenant1 vulnerability
- Multi Tenant LoadMaster1 vulnerability
- Progress® Telerik® Document Processing Libraries1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-10013HIGH | Progress UI for WinForms format provider unsafe deserialization vulnerabilityIn Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through an insecure deserialization vulnerability. CWE-502Nov 13, 2024 | CVSS7.8v3.1 | EPSS0.223% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-7679HIGH | Improper neutralization special element in hyperlinksIn Progress Telerik UI for WinForms versions prior to 2024 Q3 (2024.3.924), a command injection attack is possible through improper neutralization of hyperlink elements. CWE-77Sep 25, 2024 | CVSS7.8v3.1 | EPSS0.744% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |