CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-11357

Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.757

EPSS Ranking 99.5%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

Proposed Action

Telerik UI for ASP.NET AJAX contains an insecure direct object reference vulnerability in RadAsyncUpload that can result in file uploads in a limited location and/or remote code execution.

Ransomware Campaign

Known

References

Products affected by CVE-2017-11357

Progress » Telerik Ui For Asp.net Ajax » Version: N/A

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:-
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.1423

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.1423
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.1521

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.1521
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.1626

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.1626
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.21010

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.21010
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.21107

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.21107
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.2918

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.2918
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.31218

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.31218
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.31314

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.31314
Progress » Telerik Ui For Asp.net Ajax » Version: 2007.31425

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2007.31425
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.1415

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.1415
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.1515

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.1515
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.1619

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.1619
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.21001

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.21001
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.2723

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.2723
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.2826

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.2826
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.31105

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.31105
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.31125

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.31125
Progress » Telerik Ui For Asp.net Ajax » Version: 2008.31314

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2008.31314
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.1311

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.1311
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.1402

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.1402
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.1527

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.1527
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.2701

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.2701
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.2826

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.2826
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.31103

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31103
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.31208

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31208
Progress » Telerik Ui For Asp.net Ajax » Version: 2009.31314

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2009.31314
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.1309

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1309
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.1415

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1415
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.1519

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.1519
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.2713

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2713
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.2826

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2826
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.2929

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.2929
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.31109

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31109
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.31215

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31215
Progress » Telerik Ui For Asp.net Ajax » Version: 2010.31317

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2010.31317
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1.315

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1.315
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1315

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1315
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1413

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1413
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.1519

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.1519
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.2712

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.2712
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.2915

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.2915
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.3.1305

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.3.1305
Progress » Telerik Ui For Asp.net Ajax » Version: 2011.31115

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2011.31115
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.1.215

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.1.215
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.1.411

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.1.411
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.2.607

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.607
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.2.724

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.724
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.2.912

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.2.912
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.3.1016

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1016
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.3.1205

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1205
Progress » Telerik Ui For Asp.net Ajax » Version: 2012.3.1308

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2012.3.1308
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.1.220

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.220
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.1.403

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.403
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.1.417

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.1.417
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.2.611

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.2.611
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.2.717

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.2.717
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.3.1015

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1015
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.3.1114

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1114
Progress » Telerik Ui For Asp.net Ajax » Version: 2013.3.1324

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2013.3.1324
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.1.403

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.1.403
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.2.618

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.2.618
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.2.724

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.2.724
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.3.1024

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.3.1024
Progress » Telerik Ui For Asp.net Ajax » Version: 2014.3.1209

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2014.3.1209
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.1.204

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.1.204
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.604

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.604
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.623

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.623
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.729

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.729
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.2.826

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.2.826
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.3.1111

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.3.1111
Progress » Telerik Ui For Asp.net Ajax » Version: 2015.3.930

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2015.3.930
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.1.113

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.1.113
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.1.225

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.1.225
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.2.504

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.2.504
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.2.607

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.2.607
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.3.1018

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.3.1018
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.3.1027

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.3.1027
Progress » Telerik Ui For Asp.net Ajax » Version: 2016.3.914

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2016.3.914
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.1.118

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.1.118
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.1.228

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.1.228
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.2.503

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.2.503
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.2.621

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.2.621
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.2.711

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.2.711
Progress » Telerik Ui For Asp.net Ajax » Version: 2017.3.913

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2017.3.913
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.1.117

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.1.117
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.2.516

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.2.516
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.2.710

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.2.710
Progress » Telerik Ui For Asp.net Ajax » Version: 2018.3.910

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2018.3.910
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.1.115

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.1.115
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.1.215

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.1.215
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.2.514

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.2.514
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.3.1023

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.3.1023
Progress » Telerik Ui For Asp.net Ajax » Version: 2019.3.917

cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2019.3.917

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-11357

Products

Pricing

Contact Us