Vulnerabilities in Progress Software

147 results
CVE-2026-19219HIGHDialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAXEPSS 0.2%CVE-2025-6504HIGHPossibilities of IP Spoofing via X-Forwarded-For (XFF) HeaderEPSS 0.2%CVE-2026-2737HIGHPossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web applicationEPSS 0.2%CVE-2026-106155HIGHStored Cross-site Scripting (XSS) in Telerik Report Server Web Report ViewersEPSS 0.2%CVE-2024-0832HIGHPrivilege Elevation via Telerik Reporting InstallerEPSS 0.2%CVE-2026-106160MEDIUMPrototype Pollution via Model.accept and kendo.setter in Kendo UI for jQueryEPSS 0.2%CVE-2024-0219HIGHPrivilege Elevation via Telerik JustDecompile InstallerEPSS 0.2%CVE-2026-106164HIGHInfinite Loop in Telerik Document Processing XLS ImportEPSS 0.2%CVE-2026-106163MEDIUMCross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserEPSS 0.2%CVE-2026-2514HIGHPossibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web applicationEPSS 0.2%CVE-2026-106147MEDIUMCross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryEPSS 0.2%CVE-2026-106161MEDIUMCross-Site Scripting via Badge Text Binding in Kendo UI for jQueryEPSS 0.2%CVE-2026-106149MEDIUMCross-site Scripting (XSS) in Kendo UI for jQuery MenuEPSS 0.2%CVE-2026-106148MEDIUMCross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryEPSS 0.2%CVE-2026-106151MEDIUMCross-Site Scripting in Validator Validation Messages in Kendo UI for jQueryEPSS 0.2%CVE-2026-106153MEDIUMCross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendarEPSS 0.2%CVE-2026-2513HIGHPossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web applicationEPSS 0.2%CVE-2026-106157MEDIUMCross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryEPSS 0.2%CVE-2026-106159MEDIUMCross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryEPSS 0.2%CVE-2026-106158MEDIUMCross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryEPSS 0.2%