Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2024-3158 4 CVEs

Progress Software Telerik Report Server: Mehrere Schwachstellen

Published Oct 13, 2024 · Updated Oct 13, 2024 · de-DE

Vendor: Progress Software Product: Telerik Report Server Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Progress Software Telerik Report Server ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen oder die Authentifizierung zu umgehen.

Product

Der Telerik Report Server bietet eine Plattform zur Erstellung, Verwaltung und Verteilung von Berichten in einem Unternehmen.

Vulnerabilities 4

  • Critical 9.8
    CVE-2024-4358 Exploited Public exploit Scanner template EPSS 97%

    Registration Authentication Bypass Vulnerability

    In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

    Progress Software Telerik Report Server
    KEV Jun 13, 2024
  • Critical 9.1
    CVE-2024-8015

    Telerik Report Server Insecure Type Resolution

    In Progress Telerik Report Server versions prior to 2024 Q3 (10.2.24.924), a remote code execution attack is possible through object injection via an insecure type resolution vulnerability.

    Progress Software Telerik Reporting
  • High 8.8
    CVE-2024-8014

    Telerik Reporting EntityDataSource Insecure Type Resolution

    In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability.

    Progress Software Telerik Reporting
  • Medium 6.5
    CVE-2024-4357

    XML External Entity Processing Information Disclosure

    An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing.

    Progress Software Telerik Report Server

Revision history

  1. #1

    Initiale Fassung

References