Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 (11.0.17.406) allows remote attackers to inject arbitrary web script or HTML via the bgColor parameter to Telerik.ReportViewer.axd.

The remote web server is running a version of Telerik Reporting that is affected by a Cross-Site Scripting (XSS) vulnerability due to a flaw in Telerik.ReportViewer.WebForms.dll which allows a remote attacker to use specially crafted requests that can lead to arbitrary HTML and script code injection into a user's browser to be executed within the security context of the affected site.

The version of Sitefinity installed on the remote host is affected by multiple vulnerabilities :

 - An XSS vulnerability in Telerik.ReportViewer affects versions 4.2 through 11.0 (CVE-2017-9140)

 - An XSS vulnerability in?Identity Server affects versions 10.0 through 11.0 (CVE-2018-17053, CVE-2018-17054)

 - An XSS vulnerability in Service Stack affects versions 10.2 through 11.0 (CVE-2018-17056)

 - An arbitrary file upload vulnerability affects versions 4.0 through 11.0 (CVE-2018-17055)

 - An arbitrary code execution in Dynamic Linq Parser affects versions 4.0 through 11.0

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
112490	Telerik Reporting < 11.0.17.406 Cross-Site Scripting	Web App Scanning	Component Vulnerability	medium
112519	Sitefinity 11.x < 11.0.6702.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112518	Sitefinity 10.2.x < 10.2.6604.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112517	Sitefinity 10.1.x < 10.1.6506.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112516	Sitefinity 10.0.x < 10.0.6415.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112515	Sitefinity 9.2.x < 9.2.6270.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112514	Sitefinity 9.1.x < 9.1.6180.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112513	Sitefinity 9.0.x < 9.0.6060.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112512	Sitefinity 8.2.x < 8.2.5970.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112511	Sitefinity 8.1.x < 8.1.5860.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112510	Sitefinity 8.0.x < 8.0.5770.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112509	Sitefinity 7.3.x < 7.3.5690.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112508	Sitefinity 7.2.x < 7.2.5350.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112507	Sitefinity 7.1.x < 7.1.5240.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112506	Sitefinity 7.0.x < 7.0.5140.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112505	Sitefinity 6.3.x < 6.3.5050.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112504	Sitefinity 6.2.x < 6.2.4930.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112503	Sitefinity 6.1.x < 6.1.4720.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
112502	Sitefinity < 6.0.4230.0 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high

Detections

Analytics

CVE-2017-9140

medium

Tenable Plugins

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high