Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Progress Software Telerik Reporting — docs.telerik.com/reporting/knowledge-base/deserialization-v… Clear all filters
TI-2024-01728 CVE-2024-1856 · GHSA-vjpg-wm6m-cjg7

Progress Telerik Reporting Remote Deserialization Vulnerability

Priority MEDIUM 42

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01129 Published 2024-03-20 Fixed in 2024 Q1 (18.0.24.130) CWE-502
TI-2024-01677 CVE-2024-1801 · GHSA-5c2q-g9wc-9gf6

Progress Telerik Reporting Local Deserialization Vulnerability

Priority LOW 36

In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00422 Published 2024-03-20 Fixed in 2024 Q1 (18.0.24.130) CWE-502