Telerik Reporting
Approved changes feed: RSS · Atom
cpe:2.3:a:progress_software:telerik_reporting:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Progress Software (96c4320b-2c72-5331-bd5a-d39d72393793) |
|---|---|
| Product | Telerik Reporting (389d7026-a74e-51de-a34c-6a4e7b379fb0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8048 |
vulnerable | 2026-06-03 14:58:08.031853 |
Telerik Reporting Insecure Expression Evaluation
HIGH (7.8)
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.
Published: 2024-10-09T14:18:56.968Z
Updated: 2025-11-03T19:34:46.500Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8015 |
vulnerable | 2026-06-03 14:58:07.925222 |
Telerik Report Server Insecure Type Resolution
CRITICAL (9.1)
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.
Published: 2024-10-09T14:49:19.603Z
Updated: 2024-10-09T16:06:49.209Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8014 |
vulnerable | 2026-06-03 14:58:07.924638 |
Telerik Reporting EntityDataSource Insecure Type Resolution
HIGH (8.8)
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.
Published: 2024-10-09T14:16:33.764Z
Updated: 2025-11-03T19:34:45.119Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7840 |
vulnerable | 2026-06-03 14:58:07.368316 |
Improper neutralization special element in hyperlinks
HIGH (7.8)
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.
Published: 2024-10-09T14:41:40.048Z
Updated: 2025-11-03T19:34:43.663Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0832 |
vulnerable | 2026-06-03 14:54:04.279243 |
Privilege Elevation via Telerik Reporting Installer
HIGH (7.8)
In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.
Published: 2024-01-31T15:14:44.556Z
Updated: 2024-08-23T18:18:34.073Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.