TR
Product
Telerik Report Server
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch
Add Telerik Report Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4358 In wildKEV | 9.8 | May 29 | Registration Authentication Bypass Vulnerability Affected: 1.0.0 before 10.1.24.514 |
| CVE-2024-6327 | 9.8 | Jul 24 | Progress Telerik Report Server Deserialization Affected: 1.00 before 2024 Q2 (10.1.24.709) |
| CVE-2024-7292 | 8.8 | Oct 9 | Account Controller allows high count of login attempts Affected: 1.0.0 before 2024 Q3 (10.2.24.806) |
| CVE-2024-7293 | 8.8 | Oct 9 | Password policy for new users is not strong enough Affected: 1.0.0 before 10.2.24.806 |
| CVE-2024-1800 | 8.8 | Mar 20 | Progress Telerik Report Server Deserialization Affected: 1.00 before 2024 Q1 (10.0.24.130) |
| CVE-2024-7294 | 6.5 | Oct 9 | Uncontrolled resource consumption of anonymous endpoints Affected: 1.0.0 before 10.2.24.806 |
| CVE-2024-7295 | 6.2 | Nov 13 | Hard-coded credentials used for temporary and cache data encryption Affected: 1.0.0 before 10.3.24.1112 |
Showing 7