CVE-2017-9248
Progress ASP.NET AJAX and Sitefinity
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
What it is
Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform cross-site-scripting (XSS) attacks, compromise the ASP.NET ViewState, and/or upload and download files.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Progress entries on the list
- LoadMaster Progress LoadMaster Command Injection Vulnerability CVE-2026-8037 · Aug 7, 2026
- WhatsUp Gold Progress WhatsUp Gold Path Traversal Vulnerability CVE-2024-4885 · Mar 3, 2025
- Kemp LoadMaster Progress Kemp LoadMaster OS Command Injection Vulnerability CVE-2024-1212 · Nov 18, 2024
- WhatsUp Gold Progress WhatsUp Gold SQL Injection Vulnerability CVE-2024-6670 · Sep 16, 2024
- Telerik Report Server Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability CVE-2024-4358 · Jun 13, 2024
- WS_FTP Server Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability CVE-2023-40044 · Oct 5, 2023