Product by Progress
Progress Software Telerik Reporting
14 known vulnerabilities in Progress Software Telerik Reporting (Progress), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2017-9140 | Progress Software Telerik Reporting: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2024-1856 | Progress Telerik Reporting Remote Deserialization Vulnerability | 8.5 | |
| Critical | CVE-2024-6096 | Unsafe Deserialization Vulnerability | 8.8 | |
| High | CVE-2024-8014 | Telerik Reporting EntityDataSource Insecure Type Resolution | 8.8 | |
| High | CVE-2024-7840 | Improper neutralization special element in hyperlinks | 7.8 | |
| Medium | CVE-2024-4357 | XML External Entity Processing Information Disclosure | 6.5 | |
| High | CVE-2024-1801 | Progress Telerik Reporting Local Deserialization Vulnerability | 7.7 | |
| High | CVE-2024-7294 | Uncontrolled resource consumption of anonymous endpoints | 7.5 | |
| High | CVE-2024-7293 | Password policy for new users is not strong enough | 7.5 | |
| Medium | CVE-2024-6097 | Absolute Path Traversal Vulnerability | 5.3 | |
| High | CVE-2024-4200 | Progress Telerik Reporting Local Deserialization Vulnerability | 7.7 | |
| High | CVE-2024-4202 | Progress Telerik Reporting Local Instantiation Vulnerability | 7.7 | |
| High | CVE-2024-8048 | Telerik Reporting Insecure Expression Evaluation | 7.8 | |
| High | CVE-2024-0832 | Privilege Elevation via Telerik Reporting Installer | 7.8 |