CVE-2024-7294highCWE-400

CVE-2024-7294: falha de alta gravidade em Progress Software Corporation Telerik Report…

Uncontrolled resource consumption of anonymous endpoints

Publicada em

Seguir esta CVE+ Monitorar Telerik Report Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.3%
In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Progress Software Corporation · Telerik Report Server
CVEs relacionadas — Progress Software Corporation Telerik Report…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-4358CRITICALRegistration Authentication Bypass VulnerabilityEPSS 97.5%KEVCVE-2024-1800CRITICALProgress Telerik Report Server DeserializationEPSS 34.2%CVE-2024-6327CRITICALProgress Telerik Report Server DeserializationEPSS 2.0%CVE-2024-7292HIGHAccount Controller allows high count of login attemptsEPSS 0.3%CVE-2024-7293HIGHPassword policy for new users is not strong enoughEPSS 0.3%CVE-2024-7295HIGHHard-coded credentials used for temporary and cache data encryptionEPSS 0.1%