TR
Product
Telerik Reporting
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 5Low 0
Watch
Add Telerik Reporting to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7293 | 8.8 | Oct 9 | Password policy for new users is not strong enough Affected: before 10.2.24.806 |
| CVE-2024-8014 | 8.8 | Oct 9 | Telerik Reporting EntityDataSource Insecure Type Resolution Affected: before 18.2.24.924 |
| CVE-2024-1856 | 8.8 | Mar 20 | Progress Telerik Reporting Remote Deserialization Vulnerability Affected: before 18.0.24.130 |
| CVE-2024-4202 | 8.6 | May 15 | Progress Telerik Reporting Local Instantiation Vulnerability Affected: before 18.1.24.514 |
| CVE-2024-7840 | 7.8 | Oct 9 | Improper neutralization special element in hyperlinks Affected: through 18.2.24.924 |
| CVE-2024-8048 | 7.8 | Oct 9 | Telerik Reporting Insecure Expression Evaluation Affected: before 18.2.24.924 |
| CVE-2024-4200 | 7.8 | May 15 | Progress Telerik Reporting Local Deserialization Vulnerability Affected: before 18.1.24.514 |
| CVE-2024-1801 | 7.8 | Mar 20 | Progress Telerik Reporting Local Deserialization Vulnerability Affected: before 18.0.24.130 |
| CVE-2024-0832 | 7.8 | Jan 31 | In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an… Affected: before 18.0.24.130 |
Showing 9