Threat database

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.8	EPSS 0.7%	CVE-2024-7840Progress Software Telerik Reporting · Command Injection High7.8EPSS 0.7%2024-10-09CVE Database V5CVE-2024-7840 In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a command injection attack is possible through improper neutralization of hyperlink elements. EPSS 0.7%Vulnerability CWE-77	CVE Database V5	2024-10-09
High	7.8	EPSS 0.2%	CVE-2024-8048Progress Software Telerik Reporting · Unsafe Reflection High7.8EPSS 0.2%2024-10-09CVE Database V5CVE-2024-8048 In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible using object injection via insecure expression evaluation. EPSS 0.2%Vulnerability CWE-470	CVE Database V5	2024-10-09
High	8.8	EPSS 0.6%	CVE-2024-8014Progress Software Telerik Reporting · Unsafe Reflection High8.8EPSS 0.6%2024-10-09CVE Database V5CVE-2024-8014 In Progress Telerik Reporting versions prior to 2024 Q3 (18.2.24.924), a code execution attack is possible through object injection via an insecure type resolution vulnerability. EPSS 0.6%Vulnerability CWE-470	CVE Database V5	2024-10-09
High	7.7	EPSS 0.4%	CVE-2024-1801Progress Software Telerik Reporting · Deserialization of Untrusted Data High7.7EPSS 0.4%2024-03-20CVE Database V5CVE-2024-1801 In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability. EPSS 0.4%Vulnerability CWE-502	CVE Database V5	2024-03-20

Page 1 of 1