Progress Software Telerik Reporting vulnerabilities

5 vulnerabilities

Known vulnerabilities in Progress Software Telerik Reporting, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2024-0832progress softwaretelerik reporting+1
EPSS score
0.19%
In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component.  In an environment where an existing Telerik Reporting install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system.7.8CVE-2024-7840progress softwaretelerik reporting+1
EPSS score
0.66%
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.9.1CVE-2024-8015progress softwaretelerik reporting+1
EPSS score
0.82%
In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.7.8CVE-2024-8048progress softwaretelerik reporting+1
EPSS score
0.22%
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.8.8CVE-2024-8014progress softwaretelerik reporting+1
EPSS score
0.62%
In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.