Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Progress Software Sitefinity — community.progress.com/s/article/Sitefinity-Security-Adviso… Clear all filters
TI-2024-10774 CVE-2024-11627 · GHSA-prq9-w4j8-gg56

Insufficient session expiration in Progress Sitefinity

Priority LOW 37

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.83…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00329 Published 2025-01-07 No fix listed CWE-613
TI-2024-10773 CVE-2024-11626 · GHSA-pfq2-75vc-mj87

Cross-site scripting in Progress Sitefinity

Priority LOW 38

Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.81…

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00362 Published 2025-01-07 No fix listed CWE-79
TI-2024-10772 CVE-2024-11625 · GHSA-qp76-rcwh-p6m8

Information disclosure through error messages in Progress Sitefinity

Priority LOW 35

Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through…

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.003 Published 2025-01-07 No fix listed CWE-209