TR
Product
Telerik Reporting
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 4Low 0
Watch
Add Telerik Reporting to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8014 | 8.8 | Oct 9 | In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability Affected: before 18.2.24.924 |
| CVE-2024-7293 | 8.8 | Oct 9 | In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements Affected: before 10.2.24.806 |
| CVE-2024-1856 | 8.8 | Mar 20 | In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization… Affected: before 18.0.24.130 |
| CVE-2024-4202 | 8.6 | May 15 | In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure instantiation vulnerability Affected: before 18.1.24.514 |
| CVE-2024-8048 | 7.8 | Oct 9 | In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation Affected: before 18.2.24.924 |
| CVE-2024-7840 | 7.8 | Oct 9 | In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements Affected: through 18.2.24.924 |
| CVE-2024-4200 | 7.8 | May 15 | In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization… Affected: before 18.1.24.514 |
| CVE-2024-1801 | 7.8 | Mar 20 | In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization… Affected: before 18.0.24.130 |
| CVE-2024-0832 | 7.8 | Jan 31 | In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an… Affected: before 18.0.24.130 |
Showing 9