TR
Product
Telerik Report Server
by Progress · last CVE Feb 12, 2025
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch

Add Telerik Report Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-7292
8.8
0%
Oct 9
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts
Affected: before 10.2.24.806
CVE-2024-1800
8.8
34%
Mar 20
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability
Affected: before 10.0.24.130
CVE-2024-8015
7.2
1%
Oct 9
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution…
Affected: before 10.2.24.924
Showing 3