TR
Product
Telerik Report Server
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add Telerik Report Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4358 In wildKEV | 9.8 | May 29 | Registration Authentication Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2024-6327 | 9.8 | Jul 24 | In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability Affected: before 10.1.24.709 |
| CVE-2024-7292 | 8.8 | Oct 9 | In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts Affected: before 10.2.24.806 |
| CVE-2024-1800 | 8.8 | Mar 20 | In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability Affected: before 10.0.24.130 |
| CVE-2024-8015 | 7.2 | Oct 9 | In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution… Affected: before 10.2.24.924 |
| CVE-2025-0556 | 6.5 | Feb 12 | In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between… Affected: before 11.0.25.211 |
| CVE-2024-7295 | 6.2 | Nov 13 | In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to… Affected: before 10.3.24.1112 |
| CVE-2024-4837 | 5.3 | May 15 | In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality… Affected: before 10.1.24.514 |
Showing 8