Telerik Vulnérabilités

Chronologie

Taper

Produit

Telerik Progress UI for ASP.NET AJAX2
Telerik UI for ASP.NET AJAX2
Progress Telerik JustAssembly2
Progress Telerik JustDecompile2
Telerik Analytics Monitor Library2

Contre-mesures

Official Fix6
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

Exploitabilité

High4
Functional0
Proof-of-Concept0
Unproven0
Not Defined8

Vecteur d'accès

Not Defined0
Physical0
Local4
Adjacent0
Network8

Authentification

Not Defined0
High0
Low0
None12

Interaction de l'utilisateur

Not Defined0
Required2
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤82
≤98
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤96
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤62
≤70
≤88
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤84
≤90
≤106

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k10
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (9): ASP.NET AJAX RadEditor control (1), Analytics Monitor Library (1), Extensions for ASP.NET MVC (1), Fiddler (2), JustAssembly (1), JustDecompile (1), Reporting for ASP.NET WebForms Report Viewer Control (1), UI for ASP.NET AJAX (3), UI for Silverlight (1)

PubliéBaseTempVulnérabilitéProdExpConEPSSCTICVE
06/11/20207.06.7Telerik Fiddler Local Privilege EscalationInconnueNot DefinedOfficial Fix0.001920.00CVE-2020-13661
31/03/20207.47.2Progress Telerik UI for Silverlight RadUpload RadUploadHandler directory traversalInconnueNot DefinedOfficial Fix0.000960.03CVE-2020-11414
13/12/20198.58.5Telerik UI for ASP.NET AJAX RadChart directory traversalInconnueNot DefinedNot Defined0.009190.04CVE-2019-19790
11/12/20198.58.5Progress Telerik UI for ASP.NET AJAX .NET Deserialization RadAsyncUpload elévation de privilègesInconnueHighNot Defined0.926750.06CVE-2019-18935
28/05/20196.05.8Telerik Fiddler Win8 Loopback Exemption elévation de privilègesInconnueNot DefinedNot Defined0.000690.04CVE-2019-12097
08/10/20186.36.3Telerik Extensions for ASP.NET MVC elévation de privilègesInconnueNot DefinedNot Defined0.001540.00CVE-2018-17060
16/08/20186.56.5Progress Telerik JustAssembly/JustDecompile .NET Object elévation de privilègesInconnueNot DefinedNot Defined0.000850.00CVE-2018-15122
23/08/20178.58.4Telerik Progress UI for ASP.NET AJAX Telerik.Web.UI chiffrement faibleInconnueHighOfficial Fix0.117310.04CVE-2017-11317
22/05/20175.24.9Telerik Reporting for ASP.NET WebForms Report Viewer Control cross site scriptingReporting SoftwareNot DefinedOfficial Fix0.001910.01CVE-2017-9140
12/03/20158.48.0Telerik Analytics Monitor Library Privileges EQATEC.Analytics.Monitor.Win32_vc100.dll elévation de privilègesSoftware LibraryNot DefinedOfficial Fix0.000600.00CVE-2015-2264

1 plus d'entrées ne sont pas affichées

Do you want to use VulDB in your project?

Use the official API to access entries easily!