Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Progress Software Telerik Report Server 10.2.24.806 Clear all filters
TI-2024-06756 CVE-2024-7294 · GHSA-pcmx-c2wg-899q

Uncontrolled resource consumption of anonymous endpoints

Priority LOW 35

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00341 Published 2024-10-09 Fixed in 10.2.24.806 CWE-400
TI-2024-06755 CVE-2024-7293 · GHSA-gc35-q76c-xj63

Password policy for new users is not strong enough

Priority MEDIUM 40

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack is possible through weak password requirements.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00334 Published 2024-10-09 Fixed in 10.2.24.806 CWE-521