Skip to content
OpenAdvisories

Vendor

Progress Software

279 known vulnerabilities.

Products

WhatsUp Gold 42 MarkLogic Server 41 WS_FTP Server 26 Telerik UI for ASP.NET AJAX 19 LoadMaster 17 Kendo UI for jQuery 15 Sitefinity 12 Telerik Report Server 12 Telerik Reporting 10 Object Scale Connection Manager 10 MOVEit WAF 10 Telerik Document Processing Libraries 9 MOVEit Automation 7 Flowmon 7 MOVEit Transfer 7 KendoReact 6 ECS Connections Manager 5 Telerik UI for WPF 5 ECS Connection Manager 5 OpenEdge 5 Chef Automate 4 Kendo UI for Angular 4 Progress® Telerik® Fiddler® Classic 4 Flowmon ADS 4 Progress® Telerik® Fiddler® Everywhere 3 Telerik UI for WinForms 3 Kendo UI for Vue 3 Chef Inspec 2 Hybrid Data Pipeline 2 Telerik UI for ASP.NET MVC 1 Telerik UI for ASP.NET Core 1 Telerik UI for Blazor 1 Autonomous REST Connector GenAI Agents 1 Chef Habitat Builder 1 Telerik JustDecompile 1 Telerik KendoReact 1 Progress® Telerik® Reporting 1 Telerik UI for WinUI 1 Telerik Test Studio 1 Fiddler Download & Setup Skill 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.1
    CVE-2026-19219 Public exploit

    DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders t…

    Progress Software Telerik UI for ASP.NET AJAX
  • High 8.1
    CVE-2026-13181 Public exploit

    RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments.

    Progress Software Telerik UI for ASP.NET AJAX
  • High 8.1
    CVE-2026-6023 Public exploit

    Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX

    In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state if the state is exposed to the client. If an attacker tampers with this state, a server-side…

    Progress Software Telerik UI for ASP.NET AJAX
  • High 8.4
    CVE-2024-5009 Public exploit EPSS 17%

    WhatsUp Gold SetAdminPassword Improper Access Control Privilege Escalation Vulnerability

    In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.

    Progress Software WhatsUp Gold
  • High 7.5
    CVE-2023-6595 Public exploit

    WhatsUp Gold Unauthenticated Access to an API Endpoint

    In WhatsUp Gold versions released before 2023.1, an API endpoint was found to be missing an authentication mechanism. It is possible for an unauthenticated attacker to enumerate ancillary credential information stored within WhatsUp Gold.

    Progress Software WhatsUp Gold