Product by Progress Software Corporation
Telerik Report Server
7 known vulnerabilities in Telerik Report Server (Progress Software Corporation), 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2024-4358 | Registration Authentication Bypass Vulnerability In CISA KEValso in 1 other product | 9.8 | |
| Critical | CVE-2024-1800 | Progress Telerik Report Server Deserialization | 9.9 | |
| Critical | CVE-2024-6327 | Progress Telerik Report Server Deserialization | 9.9 | |
| High | CVE-2024-7294 | Uncontrolled resource consumption of anonymous endpoints | 7.5 | |
| High | CVE-2024-7293 | Password policy for new users is not strong enough | 7.5 | |
| High | CVE-2024-7292 | Account Controller allows high count of login attempts | 7.5 | |
| High | CVE-2024-7295 | Hard-coded credentials used for temporary and cache data encryption | 7.1 |