← Back

CVE-2025-3600

nvd nist
Published: May 14, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: security@progress.com (Secondary)

Description

In Progress® Telerik® UI for AJAX, versions 2011.2.712 to 2025.1.218, an unsafe reflection vulnerability exists that may lead to an unhandled exception resulting in a crash of the hosting process and denial of service.

Affected (1)

Progress
1 product
Telerik Ui For Asp.net Ajax
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Telerik Ui For Asp.net Ajax
From 2011.2712 to 2025.1.218

Related CWEs

CWE-470
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.

References (1)

Source: security@progress.com
MitigationVendor Advisory

Timeline

No history available yet.