Product by Progress

    Progress Software Sitefinity

    24 known vulnerabilities in Progress Software Sitefinity (Progress), 1 of them actively exploited (CISA KEV).

    Key figures

    24

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    6

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Progress Software Sitefinity (Progress)
    CriticalCVE-2017-9248

    Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    HighCVE-2017-18179

    Progress Software Sitefinity: security vulnerability

    		8.8
    CriticalCVE-2017-15883

    Progress Software Sitefinity: Authentication Bypass

    		9.8
    MediumCVE-2017-18178

    Progress Software Sitefinity: Open Redirect

    		6.1
    CriticalCVE-2019-17392

    Progress Software Sitefinity: security vulnerability

    		9.8
    CriticalCVE-2026-7312

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    also in 1 other product

    		10.0
    CriticalCVE-2026-7198

    CWE-284: Improper Access Control in web services in Progress Sitefinity

    also in 1 other product

    		9.8
    CriticalCVE-2023-29375

    Progress Software Sitefinity: security vulnerability

    		9.8
    HighCVE-2026-7195

    CWE-20: Improper Input Validation in web services in Progress Sitefinity

    also in 1 other product

    		8.8
    MediumCVE-2023-27636

    Progress Software Sitefinity: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2026-7201

    CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity

    also in 1 other product

    		8.8
    HighCVE-2018-17055

    Progress Software Sitefinity: Unrestricted File Upload

    		7.5
    HighCVE-2026-7313

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    also in 1 other product

    		8.7
    MediumCVE-2019-7215

    Progress Software Sitefinity: security vulnerability

    		6.5
    HighCVE-2024-1632

    Incorrect access control in the Sitefinity backend

    also in 1 other product

    		8.8
    HighCVE-2024-11626

    Progress Software Sitefinity: Cross-site Scripting

    also in 1 other product

    		8.4
    HighCVE-2024-1636

    Potential Cross-Site Scripting (XSS) in the page editing area

    also in 1 other product

    		8.0
    HighCVE-2024-11625

    Progress Software Sitefinity: Generation of Error Message Containing Sensitive Information

    also in 1 other product

    		7.7
    MediumCVE-2017-18177

    Progress Software Sitefinity: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2017-18175

    Progress Software Sitefinity: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2017-18176

    Progress Software Sitefinity: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2024-11627

    Progress Sitefinity: Insufficient Session Expiration

    		6.8
    MediumCVE-2023-29376

    Progress Software Sitefinity: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2023-6784

    Potential Use of the Sitefinity System for Distribution of Phishing Emails

    also in 1 other product

    		4.7

    News

    All products by Progress