PatchTheCVEtelerik reporting vulnerabilities and fixes
Recent CVEs affecting telerik reporting, with upgrade or downgrade steps. 10 tracked.
Also searched as: telerikreporting.
telerik reporting has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-02-12. Highest priority: CVE-2024-1856 (score 46/100).
- CVE-2024-8048 HIGH 7.8 UPGRADE In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible usi
- CVE-2024-8014 HIGH 8.8 UPGRADE In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible thr
- CVE-2024-7840 HIGH 7.8 UPGRADE In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible
- CVE-2024-7294 HIGH 7.5 UPGRADE In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on
- CVE-2024-7293 HIGH 7.5 UPGRADE In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a password brute forcing attack i
- CVE-2024-6097 MEDIUM 5.3 UPGRADE In Progress® Telerik® Reporting versions prior to 2025 Q1 (19.0.25.211), information disclosure is possible by
- CVE-2024-6096 HIGH 8.8 UPGRADE In Progress® Telerik® Reporting versions prior to 18.1.24.709, a code execution attack is possible through obj
- CVE-2024-1856 HIGH 8.5 UPGRADE In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible
- CVE-2024-1801 HIGH 7.7 UPGRADE In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible
- CVE-2024-0832 HIGH 7.8 UPGRADE In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the
FAQ
How do I fix telerik reporting vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is telerik reporting being exploited right now?
None of the tracked telerik reporting CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which telerik reporting CVE should I patch first?
CVE-2024-1856 currently ranks highest (46/100): In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible .