Progress Sitefinity vulnerabilities

• progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity CVE-2026-7313 8.7 HighJune 2, 2026
• progress sitefinity CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity CVE-2026-7312 10.0 CriticalJune 2, 2026
• progress sitefinity CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity CVE-2026-7201 8.8 HighJune 2, 2026
• progress sitefinity CWE-284: Improper Access Control in web services in Progress Sitefinity CVE-2026-7198 9.8 CriticalJune 2, 2026
• progress sitefinity CWE-20: Improper Input Validation in web services in Progress Sitefinity CVE-2026-7195 8.8 HighJune 2, 2026
• progress sitefinity : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation... CVE-2024-11627 6.8 MediumJanuary 7, 2025
• progress sitefinity Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation ... CVE-2024-11626 8.4 HighJanuary 7, 2025
• progress sitefinity Information Exposure Through an Error Message vulnerability in Progress Software Corporation... CVE-2024-11625 7.7 HighJanuary 7, 2025
• progress sitefinity Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the... CVE-2023-27636 Public exploit 5.4 MediumJune 16, 2024
• progress sitefinity Potential Cross-Site Scripting (XSS) in the page editing area CVE-2024-1636 8.0 HighFebruary 28, 2024
• progress sitefinity Incorrect access control in the Sitefinity backend CVE-2024-1632 8.8 HighFebruary 28, 2024
• progress sitefinity Potential Use of the Sitefinity System for Distribution of Phishing Emails CVE-2023-6784 4.7 MediumDecember 20, 2023
• progress sitefinity An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1... CVE-2023-29376 5.4 MediumApril 10, 2023
• progress sitefinity An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1... CVE-2023-29375 9.8 CriticalApril 10, 2023
• progress sitefinity Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because... CVE-2019-17392 9.8 CriticalNovember 26, 2019
• progress sitefinity cms Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News... CVE-2017-18639 6.1 MediumNovember 6, 2019
• progress sitefinity Progress Sitefinity 10.1.6536 does not invalidate session cookies upon logouts. It instead tries... CVE-2019-7215 6.5 MediumJune 6, 2019
• progress sitefinity cms Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions... CVE-2018-17054 6.1 MediumOctober 3, 2018
• progress sitefinity cms Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions... CVE-2018-17053 6.1 MediumOctober 3, 2018
• progress sitefinity cms Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2... CVE-2018-17056 6.1 MediumSeptember 28, 2018
• progress sitefinity An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0... CVE-2018-17055 7.5 HighSeptember 28, 2018
• progress sitefinity Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that... CVE-2017-18179 8.8 HighFebruary 12, 2018
• progress sitefinity Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication... CVE-2017-18178 6.1 MediumFebruary 12, 2018
• progress sitefinity Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User... CVE-2017-18177 5.4 MediumFebruary 12, 2018
• progress sitefinity Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the... CVE-2017-18176 5.4 MediumFebruary 12, 2018
• progress sitefinity Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka... CVE-2017-18175 5.4 MediumFebruary 12, 2018
• progress sitefinity Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass... CVE-2017-15883 9.8 CriticalJanuary 8, 2018
• progress sitefinity, telerik ui for asp.net ajax, progress asp.net ajax and sitefinity +2 more Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity... CVE-2017-9248 In KEVPublic exploit EPSS 75.1% 9.8 CriticalJuly 3, 2017
• progress telerik reporting, sitefinity cms +1 more Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik... CVE-2017-9140 6.1 MediumMay 22, 2017