Telerik Reporting
Approved changes feed: RSS · Atom
cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Progress (f9d80521-f73f-5a85-8df9-9306f2f67809) |
|---|---|
| Product | Telerik Reporting (a2d1ede4-603b-5a0e-ba20-3445a1fc99ff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8048 |
vulnerable | 2026-06-08 06:58:24.276861 |
Telerik Reporting Insecure Expression Evaluation
HIGH (7.8)
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.
Published: 2024-10-09T14:18:56.968Z
Updated: 2025-11-03T19:34:46.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8014 |
vulnerable | 2026-06-08 06:58:24.188949 |
Telerik Reporting EntityDataSource Insecure Type Resolution
HIGH (8.8)
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.
Published: 2024-10-09T14:16:33.764Z
Updated: 2025-11-03T19:34:45.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7840 |
vulnerable | 2026-06-08 06:58:23.652896 |
Improper neutralization special element in hyperlinks
HIGH (7.8)
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.
Published: 2024-10-09T14:41:40.048Z
Updated: 2025-11-03T19:34:43.663Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7294 |
vulnerable | 2026-06-08 06:58:21.753477 |
Uncontrolled resource consumption of anonymous endpoints
HIGH (7.5)
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.
Published: 2024-10-09T14:45:30.445Z
Updated: 2024-10-09T16:17:21.325Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7293 |
vulnerable | 2026-06-08 06:58:21.752813 |
Password policy for new users is not strong enough
HIGH (7.5)
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.
Published: 2024-10-09T14:43:28.711Z
Updated: 2024-10-09T16:18:01.674Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6327 |
vulnerable | 2026-06-08 06:58:18.591273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6097 |
vulnerable | 2026-06-08 06:58:17.765344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6096 |
vulnerable | 2026-06-08 06:58:17.763754 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4357 |
vulnerable | 2026-06-08 06:50:17.574904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4202 |
vulnerable | 2026-06-08 06:50:17.219202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4200 |
vulnerable | 2026-06-08 06:50:17.215207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1856 |
vulnerable | 2026-06-08 06:27:14.721963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1801 |
vulnerable | 2026-06-08 06:27:14.553150 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0832 |
vulnerable | 2026-06-08 06:22:02.946809 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9140 |
vulnerable | 2026-06-08 05:10:09.385511 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.