← Back

Telerik Report Server

telerik_report_server

Vendor: Progress • 7 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-0556
1Progress
1Telerik Report Server
Jun 17, 2026
Feb 12, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host p...Show more
In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.Show less
CVE-2024-7295
1Progress
1Telerik Report Server
Jun 17, 2026
Nov 13, 2024
N/A· v4
6.2 MEDIUM· v3
N/A· v2
In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.
CVE-2024-8015
1Progress
1Telerik Report Server
Jun 17, 2026
Oct 9, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.
CVE-2024-7292
1Progress
1Telerik Report Server
Jun 17, 2026
Oct 9, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.
CVE-2024-6327
1Progress
1Telerik Report Server
Jun 17, 2026
Jul 24, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Progress® Telerik® Report Server versions prior to 2024 Q2 (10.1.24.709), a remote code execution attack is possible through an insecure deserialization vulnerability.
CVE-2024-4837
1Progress
1Telerik Report Server
Jun 17, 2026
May 15, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerabil...Show more
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.Show less
CVE-2024-1800
1Progress
1Telerik Report Server
Jun 17, 2026
Mar 20, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.