Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Progress Software Sitefinity — community.progress.com/s/article/Sitefinity-Security-Adviso… Clear all filters
TI-2026-06420 CVE-2026-7313 · GHSA-28j7-fpg4-34hj

Insufficiently protected credentials in Progress Sitefinity

Priority MEDIUM 40

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 8.0.5700 to 13.3.7652 allows a remote authenticated attacker to obtain plain-text credentials used connect to Sitefinity I…

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00319 Published 2026-06-02 Fixed in 13.3.7652 CWE-522
TI-2026-06419 CVE-2026-7312 · GHSA-2h6v-g45h-32xx

Insufficiently protected credentials in Progress Sitefinity

Priority MEDIUM 43

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.8441, 15.3.8500 to 15.3.…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00441 Published 2026-06-02 Fixed in 14.4.8152, 15.0.8234 +4 CWE-522
TI-2026-06320 CVE-2026-7201 · GHSA-62q8-jg47-5wpw

Authorization bypass in Progress Sitefinity

Priority MEDIUM 40

CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote authenticated attacker to mod…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00348 Published 2026-06-02 Fixed in 15.2.8441, 15.3.8531 +1 CWE-639
TI-2026-06317 CVE-2026-7198 · GHSA-9pjg-65cc-3h57

Improper access control in Progress Sitefinity

Priority MEDIUM 49

CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before 15.4.8630 allows a remote unauthenticated attacker to access content that should be restricted, resulting in full compromise of con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00443 Published 2026-06-02 Fixed in 15.4.8630 CWE-284
TI-2026-06315 CVE-2026-7195 · GHSA-5846-8mmv-m39j

Improper input validation in Progress Sitefinity

Priority MEDIUM 40

CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.3.x before 15.3.8531,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00433 Published 2026-06-02 Fixed in 14.4.0, 14.4.8152 +5 CWE-20