Sitefinity Cms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SC

Product

Sitefinity Cms

by Progress · last CVE Nov 6, 2019

5

CVEs

0

On KEV

6.1

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 0Medium 5Low 0

Severity

All severities5 Critical0 High0 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Sitefinity Cms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-18639	6.1	1%	Nov 6	Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title,… Affected: before 10.1
CVE-2018-17054	6.1	1%	Oct 3	Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML… Affected: 10.0 through 11.0
CVE-2018-17053	6.1	1%	Oct 3	Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers to inject arbitrary web script or HTML… Affected: 10.0 through 11.0
CVE-2018-17056	6.1	1%	Sep 28	Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to inject arbitrary web script or HTML via… Affected: 10.2 through 11.0
CVE-2017-9140	6.1	10%	May 22	Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer control before R1 2017 SP2 (11.0.17.406)… Affected: 4.2 through 11.0