Progress Sitefinity vulnerabilities, page 2
24 vulnerabilities
Known vulnerabilities in Progress Sitefinity, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-29375progresssitefinity
EPSS score0.82%
An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.CVE-2023-29376progresssitefinityEPSS score0.41%
An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potential XSS by privileged users in Sitefinity to media libraries.CVE-2023-27636progresssitefinityEPSS score1.29%
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.CVE-2023-6784progress software corporationsitefinity+1EPSS score0.38%
A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.