What is the latest compatible Telerik.Web.UI version for .NET framework 4.7.2 that can address the security vulnerabilities.
Current version used in the project is - 2012.3.1308.40
Looking to fix the following vulnerabilities -
CVE-2019-19790, CVE-2019-18935, CVE-2017-11357, CVE-2017-11317, CVE-2017-9248, CVE-2014-4958
1 Answer, 1 is accepted
Hi Aman,
Thank you for reaching out regarding security vulnerabilities and .NET Framework 4.7.2 compatibility.
The latest version 2025.4.1111 of Telerik UI for ASP.NET AJAX is fully compatible with .NET Framework 4.7.2. All versions from 2024 Q2 (2024.2.513) onwards support .NET Framework 4.7.2, as the product now provides assemblies compatible with .NET Framework 4.6.2 through 4.8.1 (see the docs).
Addressing Security Vulnerabilities:
Your current version (2012.3.1308.40) from 2012 is significantly outdated. All the CVEs you mentioned have been addressed in subsequent releases over the years. Additionally, there is a recent critical security vulnerability:
- CVE-2025-3600 (HIGH - CVSS 7.5): An unsafe reflection vulnerability affecting versions 2011.2.712 to 2025.1.218. This has been patched in version 2025.1.416 (2025 Q1 SP2) or later.
Recommendation:
We strongly recommend upgrading to the latest version (2025.4.1111 or newer) to address the known vulnerabilities in the suite.
Upgrade Path:
Since you're on .NET Framework 4.7.2, you can directly upgrade to the latest version without any .NET Framework migration concerns. Follow the upgrade instructions and Known Issues and Important Changes for detailed steps.
You can download the latest version from Your Account | Product Downloads.
Please let us know if you have any questions about the upgrade process.
Regards,
Rumen
Progress Telerik