Skip to contentProgress Software Corporation Sitefinity vulnerabilities
- progress sitefinityCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityCVE-2026-73138.7 High
- progress sitefinityCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityCVE-2026-731210.0 Critical
- progress sitefinityCWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress SitefinityCVE-2026-72018.8 High
- progress sitefinityCWE-284: Improper Access Control in web services in Progress SitefinityCVE-2026-71989.8 Critical
- progress sitefinityCWE-20: Improper Input Validation in web services in Progress SitefinityCVE-2026-71958.8 High
- progress software corporation sitefinityInsufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under...CVE-2025-19687.7 High
- progress sitefinity: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation...CVE-2024-116276.8 Medium
- progress sitefinityImproper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation ...CVE-2024-116268.4 High
- progress sitefinityInformation Exposure Through an Error Message vulnerability in Progress Software Corporation...CVE-2024-116257.7 High
- progress software corporation sitefinityURL Redirection to Arbitrary Site Exists in SitefinityCVE-2024-48825.3 Medium
- progress sitefinityPotential Cross-Site Scripting (XSS) in the page editing areaCVE-2024-16368.0 High
- progress sitefinityIncorrect access control in the Sitefinity backendCVE-2024-16328.8 High
- progress sitefinityPotential Use of the Sitefinity System for Distribution of Phishing EmailsCVE-2023-67844.7 Medium