Progress Software Corporation Sitefinity vulnerabilities

26 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Exploited Progress Software Corporation Sitefinity vulnerabilities

CVE-2017-9248 — Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

CVE-2026-7313 — CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity (CVSS 4.9)
CVE-2026-7312 — CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity (CVSS 7.5)
CVE-2026-7201 — CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity (CVSS 8.8)
CVE-2026-7198 — CWE-284: Improper Access Control in web services in Progress Sitefinity (CVSS 9.8)
CVE-2026-7195 — CWE-20: Improper Input Validation in web services in Progress Sitefinity (CVSS 8.1)
CVE-2025-1968 — (CVSS 7.7)
CVE-2024-11627 — (CVSS 8.1)
CVE-2024-11626 — (CVSS 4.8)
CVE-2024-11625 — (CVSS 5.3)
CVE-2024-4882 — URL Redirection to Arbitrary Site Exists in Sitefinity (CVSS 5.3)
CVE-2023-27636 — (CVSS 5.4)
CVE-2024-1636 — Potential Cross-Site Scripting (XSS) in the page editing area (CVSS 5.4)
CVE-2024-1632 — Incorrect access control in the Sitefinity backend (CVSS 6.5)
CVE-2023-6784 — Potential Use of the Sitefinity System for Distribution of Phishing Emails (CVSS 4.3)
CVE-2023-29376 — (CVSS 5.4)
CVE-2023-29375 — (CVSS 9.8)
CVE-2019-17392 — (CVSS 9.8)
CVE-2019-7215 — (CVSS 6.5)
CVE-2018-17055 — (CVSS 7.5)
CVE-2017-18179 — (CVSS 8.8)
CVE-2017-18178 — (CVSS 6.1)
CVE-2017-18177 — (CVSS 5.4)
CVE-2017-18176 — (CVSS 5.4)
CVE-2017-18175 — (CVSS 5.4)
CVE-2017-15883 — (CVSS 9.8)