Progress Software Telerik Report Server

Name: Progress Software Telerik Report Server
Brand: Progress Software

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

unpatched

by severity

1critical4high5medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-4358US	critical9.8OT critical	97.5% (100th)	KEV	10.1.24.514	2024-05-29	< 10.1.24.514
CVE-2024-8015US	high7.2	0.82% (57th)	—	18.2.24.924	2024-10-09	3 versions
CVE-2024-4357US	medium6.5	0.70% (53rd)	—	10.1.24.514	2024-05-15	2 versions
CVE-2024-8014US	high8.8	0.62% (50th)	—	10.1.24.514	2024-10-09	3 versions
CVE-2024-4837US	medium5.3	0.43% (37th)	—	10.1.24.514	2024-05-15	1.0.0.0 → 10.1.24.514
CVE-2024-7294US	medium6.5	0.34% (27th)	—	10.2.24.806	2024-10-09	< 10.2.24.806
CVE-2024-7293US	high8.8	0.33% (27th)	—	10.2.24.806	2024-10-09	< 10.2.24.806
CVE-2024-7292US	high8.8	0.33% (27th)	—	10.2.24.806	2024-10-09	< 10.2.24.806
CVE-2025-0556US	medium6.5OT elevated	0.31% (24th)	—	11.0.25.211	2025-02-12	2 versions
CVE-2026-106155US	—	0.20% (10th)	—	12.2.26.1007	2026-10-09	< 12.2.26.1007
CVE-2026-106145US	—	0.14% (4th)	—	12.2.26.1007	2026-10-09	< 12.2.26.1007
CVE-2024-7295US	medium6.2OT elevated	0.11% (1st)	—	10.3.24.1112	2024-11-13	< 10.3.24.1112

The flaw types (CWEs) most of these CVEs share.

CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-290Authentication Bypass by Spoofing1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-521Weak Password Requirements1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.