CVE-2024-7295

6.2 mediumEPSS 0.1%

Medium (6.2) in progress telerik report server. EPSS 0.1% chance of exploitation in the next 30 days.

In Progress® Telerik® Report Server versions prior to 2024 Q4 (10.3.24.1112), the encryption of local asset data used an older algorithm which may allow a sophisticated actor to decrypt this information.

Severity

CVSS 3.1

6.2 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2024-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

progress:telerik_report_server

References

https://docs.telerik.com/report-server/knowledge-base/encryption-weakness-cve-2024-7295

Check your stack JSON