Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: May 2, 2022

CVE-2017-11317

High
EPSS 92.0%CISA KEV
Telerik/User Interface (UI) for ASP.NET AJAX

Description

Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX allows remote attackers to perform arbitrary file uploads or execute arbitrary code.

EPSS — Exploit Probability

92.0%

Higher than 99.7% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2017-11317

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
92.0%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Apr 11, 2022

Added to KEV

Apr 11, 2022

Remediation Due

May 2, 2022

Affected Product

Telerik

User Interface (UI) for ASP.NET AJAX

View all Telerik CVEs