Progress Software Corporation Sitefinity vulnerabilities

7 vulnerabilities

Known vulnerabilities in Progress Software Corporation Sitefinity, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2025-1968progress software corporationsitefinity
EPSS score
0.32%
Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay Attacks).This issue affects Sitefinity: from 14.0 through 14.3, from 14.4 before 14.4.8145, from 15.0 before 15.0.8231, from 15.1 before 15.1.8332, from 15.2 before 15.2.8429.8CVE-2024-1636progress software corporationsitefinity+1
EPSS score
0.40%
Potential Cross-Site Scripting (XSS) in the page editing area.8.8CVE-2024-1632progress software corporationsitefinity+1
EPSS score
0.50%
Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area.7.7CVE-2024-11625progress software corporationsitefinity+1
EPSS score
0.30%
Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.8.4CVE-2024-11626progress software corporationsitefinity+1
EPSS score
0.36%
Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.5.3CVE-2024-4882progress software corporationsitefinity
EPSS score
0.38%
The user may be redirected to an arbitrary site in Sitefinity 15.1.8321.0 and previous versions.4.7CVE-2023-6784progress software corporationsitefinity+1
EPSS score
0.38%
A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.