CVE-2025-0556

HIGH

Telerik Report Server <2025 Q1 (11.0.25.211) - Info Disclosure

Title source: llm
STIX 2.1

Description

In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.

References (1)

Scores

CVSS v3 8.8
EPSS 0.0015
EPSS Percentile 34.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-319
Status published
Products (1)
progress/telerik_report_server < 11.0.25.211
Published Feb 12, 2025
Tracked Since Feb 18, 2026