VendorsProgresskendo_uiany version
Vulnerabilities

Progress Kendo UI any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

13CVEs
CVE-2026-108116
MDX and SOAP Injection in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
7.5EPSS 0.003
CVE-2026-106163
Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
Published 2026-10-15 · Analyzed
6.5EPSS 0.002
CVE-2026-106160
Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106147
Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106148
Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106161
Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106149
Cross-site Scripting (XSS) in Kendo UI for jQuery Menu
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106151
Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106153
Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar
Published 2026-10-15 · Analyzed
5.4EPSS 0.002
CVE-2026-106157
Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
4.7EPSS 0.002
CVE-2026-106158
Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
4.7EPSS 0.002
CVE-2026-106159
Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
4.7EPSS 0.002
CVE-2026-106162
Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery
Published 2026-10-15 · Analyzed
4.7EPSS 0.001