Lucene search
ProgressSoftwareCVELIST:CVE-2024-1856HistoryMar 20, 2024 - 1:13 p.m.
CVE-2024-1856 Progress Telerik Reporting Remote Deserialization Vulnerability
2024-03-2013:13:51
CWE-502
ProgressSoftware
www.cve.org
1
progress telerik reporting
remote deserialization
vulnerability
cve-2024-1856
code execution
threat actor
insecure deserialization
8.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
8.9 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.4%
In Progress® Telerik® Reporting versions prior to 2024 Q1 (18.0.24.130), a code execution attack is possible by a remote threat actor through an insecure deserialization vulnerability.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Telerik Reporting",
"vendor": "Progress Software Corporation",
"versions": [
{
"lessThan": "2024 Q1 (18.0.24.130)",
"status": "affected",
"version": "Q1 2007",
"versionType": "semver"
}
]
}
]
8.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
8.9 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
16.4%
Related for CVELIST:CVE-2024-1856