# Progress Software Corporation Telerik Report Server.

Every CVE that names Progress Software Corporation Telerik Report Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Hard-coded credentials used for temporary and cache data encryption](https://agentprime.io/advisories/CVE-2024-7295.md)
  `CVE-2024-7295` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 7.1 High · Not analysed yet · Published 13 Nov 2024 · Tags: Hard-coded credentials
- [Account Controller allows high count of login attempts](https://agentprime.io/advisories/CVE-2024-7292.md)
  `CVE-2024-7292` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2024 · Tags: Authentication bypass
- [Uncontrolled resource consumption of anonymous endpoints](https://agentprime.io/advisories/CVE-2024-7294.md)
  `CVE-2024-7294` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2024 · Tags: Denial of service
- [Password policy for new users is not strong enough](https://agentprime.io/advisories/CVE-2024-7293.md)
  `CVE-2024-7293` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 7.5 High · Not analysed yet · Published 9 Oct 2024 · Tags: Hard-coded credentials
- [Progress Telerik Report Server Deserialization](https://agentprime.io/advisories/CVE-2024-6327.md)
  `CVE-2024-6327` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2024 · Tags: Insecure deserialization
- [Registration Authentication Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-4358.md)
  `CVE-2024-4358` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.97 · Not analysed yet · Published 29 May 2024 · Tags: Authentication bypass
- [Progress Telerik Report Server Deserialization](https://agentprime.io/advisories/CVE-2024-1800.md)
  `CVE-2024-1800` · CVE record: Progress Software Corporation Telerik Report Server · CVSS 9.9 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.34 · Not analysed yet · Published 20 Mar 2024 · Tags: Insecure deserialization

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=progress-software-corporation-telerik-report-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/progress-software-corporation-telerik-report-server/>. Everything for agents: <https://agentprime.io/llms.txt>.