CVE-2024-7294: Progress Telerik Reporting

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In Progress® Telerik® Report Server versions prior to 2024 Q3 (10.2.24.806), an HTTP DoS attack is possible on anonymous endpoints without rate limiting.

Affected products

• Progress Telerik Reporting: before 10.2.24.806 (fixed in 10.2.24.806)

Published 2024-10-09. Last modified 2026-06-17.