CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9140

Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 (11.0.17.406) allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.055

EPSS Ranking 89.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2017-9140

Progress » Sitefinity Cms » Version: 10.0

cpe:2.3:a:progress:sitefinity_cms:10.0
Progress » Sitefinity Cms » Version: 10.1

cpe:2.3:a:progress:sitefinity_cms:10.1
Progress » Sitefinity Cms » Version: 10.2

cpe:2.3:a:progress:sitefinity_cms:10.2
Progress » Sitefinity Cms » Version: 11.0

cpe:2.3:a:progress:sitefinity_cms:11.0
Progress » Sitefinity Cms » Version: 4.2

cpe:2.3:a:progress:sitefinity_cms:4.2
Progress » Telerik Reporting » Version: N/A

cpe:2.3:a:progress:telerik_reporting:-
Progress » Telerik Reporting » Version: 10.0.16.113

cpe:2.3:a:progress:telerik_reporting:10.0.16.113
Progress » Telerik Reporting » Version: 10.0.16.204

cpe:2.3:a:progress:telerik_reporting:10.0.16.204
Progress » Telerik Reporting » Version: 10.1.16.504

cpe:2.3:a:progress:telerik_reporting:10.1.16.504
Progress » Telerik Reporting » Version: 10.1.16.615

cpe:2.3:a:progress:telerik_reporting:10.1.16.615
Progress » Telerik Reporting » Version: 10.1.24.514

cpe:2.3:a:progress:telerik_reporting:10.1.24.514
Progress » Telerik Reporting » Version: 10.2.16.1025

cpe:2.3:a:progress:telerik_reporting:10.2.16.1025
Progress » Telerik Reporting » Version: 10.2.16.914

cpe:2.3:a:progress:telerik_reporting:10.2.16.914
Progress » Telerik Reporting » Version: 10.2.24.806

cpe:2.3:a:progress:telerik_reporting:10.2.24.806
Progress » Telerik Reporting » Version: 11.0.17.118

cpe:2.3:a:progress:telerik_reporting:11.0.17.118
Progress » Telerik Reporting » Version: 11.0.17.222

cpe:2.3:a:progress:telerik_reporting:11.0.17.222
Progress » Telerik Reporting » Version: 8.2.14.1027

cpe:2.3:a:progress:telerik_reporting:8.2.14.1027
Progress » Telerik Reporting » Version: 8.2.14.1204

cpe:2.3:a:progress:telerik_reporting:8.2.14.1204
Progress » Telerik Reporting » Version: 9.0.15.225

cpe:2.3:a:progress:telerik_reporting:9.0.15.225
Progress » Telerik Reporting » Version: 9.0.15.324

cpe:2.3:a:progress:telerik_reporting:9.0.15.324
Progress » Telerik Reporting » Version: 9.1.15.624

cpe:2.3:a:progress:telerik_reporting:9.1.15.624
Progress » Telerik Reporting » Version: 9.1.15.731

cpe:2.3:a:progress:telerik_reporting:9.1.15.731
Progress » Telerik Reporting » Version: 9.2.15.1105

cpe:2.3:a:progress:telerik_reporting:9.2.15.1105
Progress » Telerik Reporting » Version: 9.2.15.1126

cpe:2.3:a:progress:telerik_reporting:9.2.15.1126
Progress » Telerik Reporting » Version: 9.2.15.930

cpe:2.3:a:progress:telerik_reporting:9.2.15.930

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9140

Products

Pricing

Contact Us