CVE-2024-6097

< 19.0.25.211

In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by a local threat ac

5.3MEDIUM

CVE-2024-8048

< 18.2.24.924

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection

7.8HIGH

CVE-2024-8014

< 18.2.24.924

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injectio

8.8HIGH

CVE-2024-7840

<= 18.2.24.924

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neu

7.8HIGH

CVE-2024-7294

< 10.2.24.806

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoin

7.5HIGH

CVE-2024-7293

< 10.2.24.806

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through

7.5HIGH

CVE-2024-6096

< 18.1.24.709

In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through object injection via

8.8HIGH

CVE-2024-4357

< 10.1.24.514

An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows

6.5MEDIUM

CVE-2024-4202

< 18.1.24.514

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure

7.7HIGH

CVE-2024-4200

< 18.1.24.514

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat

7.7HIGH

CVE-2024-1856

< 18.0.24.130

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat

8.5HIGH

CVE-2024-1801

< 18.0.24.130

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat a

7.7HIGH

CVE-2024-0832

< 18.0.24.130

In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications instal

7.8HIGH

CVE-2017-9140

< 11.0.17.406

Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Vie

6.1MEDIUM