Login Request a demo
SI
Product
Sitefinity
by Progress Software · last CVE Jun 2, 2026
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 1Low 0
Severity
All severities5Critical1High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sitefinity to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-7198
9.8
0%
Jun 2
CWE-284: Improper Access Control in web services in Progress Sitefinity
Affected: 15.4.8623 before 15.4.8630
CVE-2026-7201
8.8
0%
Jun 2
CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity
Affected: 15.2.8400 before 15.2.8441; 15.3.8500 before 15.3.8531; 15.4.8600 before 15.4.8630
CVE-2026-7195
8.1
0%
Jun 2
CWE-20: Improper Input Validation in web services in Progress Sitefinity
Affected: 14.1.0 before 14.4.0; 14.4.8100 before 14.4.8152; 15.0.8200 before 15.0.8234; 15.1.8300 before 15.1.8335; 15.2.8400 before 15.2.8441; 15.3.8500 before 15.3.8531; +1 more
CVE-2026-7312
7.5
0%
Jun 2
CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity
Affected: 14.0.7700 before 14.4.8152; 15.0.8200 before 15.0.8234; 15.1.8300 before 15.1.8335; 15.2.8400 before 15.2.8441; 15.3.8500 before 15.3.8531; 15.4.8600 before 15.4.8630
CVE-2026-7313
4.9
0%
Jun 2
CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity
Affected: 8.0.5700 before 13.3.7652
Showing 5