Approved changes feed: RSS · Atom

cpe:2.3:a:progress_software_corporation:telerik_reporting:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProgress Software Corporation (936a4410-8e02-5d5c-938a-4a1509e8d7ef)
ProductTelerik Reporting (d5149df4-10f6-5fb8-b8d8-07cc7144eab9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6096 vulnerable 2026-06-03 14:58:01.856020 Unsafe Deserialization Vulnerability
HIGH (8.8)
In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via an insecure type resolution vulnerability.
Published: 2024-07-24T14:00:19.107Z
Updated: 2025-04-25T23:02:56.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4202 vulnerable 2026-06-03 14:57:14.925537 Progress Telerik Reporting Local Instantiation Vulnerability
HIGH (7.7)
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure instantiation vulnerability.
Published: 2024-05-15T16:53:30.262Z
Updated: 2024-08-01T20:33:52.951Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4200 vulnerable 2026-06-03 14:57:14.921693 Progress Telerik Reporting Local Deserialization Vulnerability
HIGH (7.7)
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
Published: 2024-05-15T16:56:25.177Z
Updated: 2024-08-01T20:33:53.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1856 vulnerable 2026-06-03 14:54:34.802828 Progress Telerik Reporting Remote Deserialization Vulnerability
HIGH (8.5)
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability.
Published: 2024-03-20T13:13:51.409Z
Updated: 2025-12-16T18:13:24.340Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1801 vulnerable 2026-06-03 14:54:34.684200 Progress Telerik Reporting Local Deserialization Vulnerability
HIGH (7.7)
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
Published: 2024-03-20T13:12:34.826Z
Updated: 2025-12-16T18:13:24.178Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.