progress telerik reporting

Name: progress telerik reporting
Brand: progress

productUS

cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical9high4medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-9140US	medium6.1	9.72% (95th)	—	11.0.17.406	2017-05-22	< 11.0.17.406
CVE-2024-1856US	high8.8	1.13% (66th)	—	18.0.24.130	2024-03-20	< 18.0.24.130
CVE-2024-6096US	critical9.8	0.87% (59th)	—	18.1.24.709	2024-07-24	< 18.1.24.709
CVE-2024-4357US	medium6.5	0.70% (53rd)	—	10.1.24.514	2024-05-15	< 10.1.24.514
CVE-2024-7840US	high7.8	0.66% (52nd)	—	no fix	2024-10-09	≤ 18.2.24.924
CVE-2024-8014US	high8.8	0.62% (50th)	—	18.2.24.924	2024-10-09	< 18.2.24.924
CVE-2024-6097US	medium5.3	0.51% (44th)	—	19.0.25.211	2025-02-12	< 19.0.25.211
CVE-2024-1801US	high7.8	0.42% (36th)	—	18.0.24.130	2024-03-20	< 18.0.24.130
CVE-2024-7294US	medium6.5	0.34% (27th)	—	10.2.24.806	2024-10-09	< 10.2.24.806
CVE-2024-7293US	high8.8	0.33% (27th)	—	10.2.24.806	2024-10-09	< 10.2.24.806
CVE-2024-4200US	high7.8	0.29% (22nd)	—	18.1.24.514	2024-05-15	< 18.1.24.514
CVE-2024-4202US	high8.6	0.27% (20th)	—	18.1.24.514	2024-05-15	< 18.1.24.514
CVE-2024-8048US	high7.8	0.22% (13th)	—	18.2.24.924	2024-10-09	< 18.2.24.924
CVE-2024-0832US	high7.8	0.19% (9th)	—	18.0.24.130	2024-01-31	< 18.0.24.130

The flaw types (CWEs) most of these CVEs share.

CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')3 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-36Absolute Path Traversal1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-521Weak Password Requirements1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.