High severity7.7NVD Advisory· Published May 15, 2024· Updated Jun 17, 2026

CVE-2024-4200

Description

In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Process Software/Telerik Reportingv5
Range: 1.0.0.0
Progress (organisation)/Telerik Reportingllm-fuzzy2 versions
<2024 Q2 (18.1.24.2.514)+ 1 more
- (no CPE)range: <2024 Q2 (18.1.24.2.514)
- cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*range: <18.1.24.514

Patches

Vulnerability mechanics

References

docs.telerik.com/reporting/knowledge-base/deserialization-vulnerability-cve-2024-4200nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000