Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Progress Software Telerik Reporting 18.2.24.924 Clear all filters
TI-2024-07265 CVE-2024-7840 · GHSA-p23j-23m2-rg99

Improper neutralization special element in hyperlinks

Priority LOW 37

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00664 Published 2024-10-09 Fixed in 18.2.24.924 CWE-77
TI-2024-07462 CVE-2024-8048 · GHSA-fxcw-5g46-3pjv

Telerik Reporting Insecure Expression Evaluation

Priority LOW 35

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2024-10-09 Fixed in 18.2.24.924 CWE-470
TI-2024-07428 CVE-2024-8014 · GHSA-p2h6-pjf9-j879

Telerik Reporting EntityDataSource Insecure Type Resolution

Priority MEDIUM 41

In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00624 Published 2024-10-09 Fixed in 18.2.24.924 CWE-470