Skip to content
OpenAdvisories

Product · Progress Software

Telerik Report Server

12 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-4358 Exploited Public exploit EPSS 97%

    Registration Authentication Bypass Vulnerability

    In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

    KEV Jun 13, 2024
  • Critical 9.9
    CVE-2024-1800 Public exploit EPSS 34%

    Progress Telerik Report Server Deserialization

    In Progress® Telerik® Report Server versions prior to 2024 Q1 (10.0.24.130), a remote code execution attack is possible through an insecure deserialization vulnerability.