TR
Product
Telerik Reporting
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 5Low 0
Watch
Add Telerik Reporting to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-6096 | 9.8 | Jul 24 | Unsafe Deserialization Vulnerability Affected: before 18.1.24.709 |
| CVE-2024-6327 | 9.8 | Jul 24 | Progress Telerik Report Server Deserialization Affected: before 10.1.24.709 |
| CVE-2024-7293 | 8.8 | Oct 9 | Password policy for new users is not strong enough Affected: before 10.2.24.806 |
| CVE-2024-8014 | 8.8 | Oct 9 | Telerik Reporting EntityDataSource Insecure Type Resolution Affected: before 18.2.24.924 |
| CVE-2024-1856 | 8.8 | Mar 20 | In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization… Affected: before 18.0.24.130 |
| CVE-2024-4202 | 8.6 | May 15 | Progress Telerik Reporting Local Instantiation Vulnerability Affected: before 18.1.24.514 |
| CVE-2024-7840 | 7.8 | Oct 9 | Improper neutralization special element in hyperlinks Affected: through 18.2.24.924 |
| CVE-2024-8048 | 7.8 | Oct 9 | Telerik Reporting Insecure Expression Evaluation Affected: before 18.2.24.924 |
| CVE-2024-4200 | 7.8 | May 15 | Progress Telerik Reporting Local Deserialization Vulnerability Affected: before 18.1.24.514 |
| CVE-2024-1801 | 7.8 | Mar 20 | In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization… Affected: before 18.0.24.130 |
| CVE-2024-0832 | 7.8 | Jan 31 | In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an… Affected: before 18.0.24.130 |
| CVE-2024-7294 | 6.5 | Oct 9 | Uncontrolled resource consumption of anonymous endpoints Affected: before 10.2.24.806 |
| CVE-2024-4357 | 6.5 | May 15 | XML External Entity Processing Information Disclosure Affected: before 10.1.24.514 |
| CVE-2017-9140 | 6.1 | May 22 | Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 (11.0.17.406)… Affected: before 11.0.17.406 |
| CVE-2024-6097 | 5.3 | Feb 12 | Absolute Path Traversal Vulnerability Affected: before 19.0.25.211 |
| CVE-2024-4837 | 5.3 | May 15 | Trust Boundary Violation Vulnerability Affected: 1.0.0.0 through 10.0.24.305 |
Showing 16