Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 36

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00295 Published 2024-05-15 Fixed in 18.1.24.2.514 CWE-502
Priority LOW 39

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure instantiation vulnerability.

CVSS 3.1HIGH 8.6 Local No auth User interaction EPSS 0.00273 Published 2024-05-15 Fixed in 18.1.24.2.514 CWE-94