[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2024-4200":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":25,"references":27,"score":29,"epss_score":30,"epss_percentile":31,"is_kev":20,"cisa_kev_date_added":32,"cisa_kev_due_date":32,"cisa_ssvc":33,"attack_mappings":43,"exploits":50},47690,"CVE-2024-4200","EUVD-2024-32754","In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.","2024-05-15T17:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":15,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":19,"confidentialityImpact":15},"UNCHANGED","3.1",7.8,"LOCAL","HIGH","CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","REQUIRED","LOW","NONE",false,[22],"CWE-502",[24],"cpe:2.3:a:progress:telerik_reporting:*:*:*:*:*:*:*:*",[26],"Progress Telerik Reporting",[28],"https:\u002F\u002Fdocs.telerik.com\u002Freporting\u002Fknowledge-base\u002Fdeserialization-vulnerability-cve-2024-4200",0.39,0.00295,0.21057,null,{"timestamp":34,"automatable":35,"tech_impact":36,"exploitation":37,"cisa_decision":38,"cisa_remediation_timeline":42},"2024-05-15T19:51:49.751055Z","no","total","none",{"vector":39,"decision":40,"priority":41},"CISAv1\u002FE:N\u002FA:N\u002FT:T\u002FM:H\u002F2026-10-25T11:38:58.128204\u002F","track_star","medium","14D",[44],{"name":45,"source":46,"tactics":47,"technique_id":49},"Exploitation for Privilege Escalation","attack_vector",[48],"privilege-escalation","T1068",[]]