Advisories · Technology

Progress Software Corporation Telerik Report Server.

Every CVE that names Progress Software Corporation Telerik Report Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-7295 CVE record

CVSS 7.1 High

Hard-coded credentials used for temporary and cache data encryption
- Progress Software Corporation Telerik Report Server
- Hard-coded credentials
Not analysed yet 13 Nov 2024
CVE-2024-7292 CVE record

CVSS 7.5 High

Account Controller allows high count of login attempts
- Progress Software Corporation Telerik Report Server
- Authentication bypass
Not analysed yet 9 Oct 2024
CVE-2024-7294 CVE record

CVSS 7.5 High

Uncontrolled resource consumption of anonymous endpoints
- Progress Software Corporation Telerik Report Server
- Denial of service
Not analysed yet 9 Oct 2024
CVE-2024-7293 CVE record

CVSS 7.5 High

Password policy for new users is not strong enough
- Progress Software Corporation Telerik Report Server
- Hard-coded credentials
Not analysed yet 9 Oct 2024
CVE-2024-6327 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Progress Telerik Report Server Deserialization
- Progress Software Corporation Telerik Report Server
- Insecure deserialization
Not analysed yet 24 Jul 2024
CVE-2024-4358 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Registration Authentication Bypass Vulnerability
- Progress Software Corporation Telerik Report Server
- Authentication bypass
Not analysed yet 29 May 2024
CVE-2024-1800 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Progress Telerik Report Server Deserialization
- Progress Software Corporation Telerik Report Server
- Insecure deserialization
Not analysed yet 20 Mar 2024