CVE-2019-18935 CISA KEV · Actively exploitedLinked to ransomware
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
CVSS score
—
EPSS probability
%99.7
Risk score
—
Published
5 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
Cisco Talos discovered a Chinese-speaking cybercrime group, tracked as UAT-10147, that targets a wide range of vulnerable web servers. This is an overview of the campaign, examining the countries affected, potential impact of BadIIS infections, the attack chain, and post-compromise tactics.
Similar Vulnerabilities
9.8
CVE-2024-1212 Actively exploitedOS command injection in Progress Loadmaster
Patch status unknown Public Exploits:3EPSS %95
9.8
CVE-2017-11357 Actively exploitedVulnerability in N/a
Workaround Public Exploits:2EPSS %78
9.6
6.8
CVE-2025-13444OS command injection in Progress Loadmaster
Patch status unknownEPSS %27
8.8
CVE-2014-5287Vulnerability in Progress Loadmaster
Patch status unknown Public Exploits:3EPSS %8
6.1
CVE-2021-41318Cross-site scripting in Progress Whatsup Gold
Patch status unknown Public Exploits:2EPSS %6
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2019-18935"