← Database

CVE-2024-7292

HIGH CVSS: 7.5 Published: 2024-10-09 Modified: 2026-06-17

Description

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), a credential stuffing attack is possible through improper restriction of excessive login attempts.

Affected Platforms

Progress Telerik Report Server

Weakness Type

CWE-307

References