CVE-2025-0556

published 2025-02-12

CVE-2025-0556: In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive…

Priority P4 32 medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C H I N A N

In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
progress	telerik_report_server	< 11.0.25.211	11.0.25.211
progress_software	telerik_report_server	>= 1.0.0 < 2025 Q1 (11.0.25.211)	2025 Q1 (11.0.25.211)

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-319