SI
Product
Sitefinity
On CISA KEVExploited in the wild
24
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 6Medium 13Low 0
Watch
Add Sitefinity to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9248 In wildKEV | 9.8 | Jul 3 | Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability Affected: before 10.0.6412.0 |
| CVE-2026-7198 | 9.8 | Jun 2 | CWE-284: Improper Access Control in web services in Progress Sitefinity Affected: 15.4.8623 before 15.4.8630 |
| CVE-2023-29375 | 9.8 | Apr 10 | An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025 Affected: 13.3 before 13.3.7646; 14.0 before 14.0.7736; 14.1 before 14.1.7826; 14.2 before 14.2.7930; 14.3 before 14.3.8026 |
| CVE-2019-17392 | 9.8 | Nov 26 | Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled Affected: 9.1 before 9.1.6185; 9.2 before 9.2.6276; 10.0 before 10.0.6431; 10.1 before 10.1.6542; 10.2 through 10.2.6651; 11.0 through 11.0.6739; +4 more |
| CVE-2017-15883 | 9.8 | Jan 8 | Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or… Affected: 5.1; 5.2; 5.3; 5.4; 6.0; 6.1; +14 more |
Showing 5