Login Request a demo
SI
Product
Sitefinity
by Progress Software Corporation · last CVE Apr 9, 2025
4
CVEs
0
On KEV
7.7
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sitefinity to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-1968
7.7
0%
Apr 9
Insufficient Session Expiration vulnerability in Progress Software Corporation Sitefinity under some specific and uncommon circumstances allows reusing Session IDs (Session Replay…
Affected: 14.0 through 14.3; 14.4 before 14.4.8145; 15.0 before 15.0.8231; 15.1 before 15.1.8332; 15.2 before 15.2.8429
CVE-2024-11625
5.3
0%
Jan 7
Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200…
Affected: 4.0 through 14.4.8142; 15.0.8200 through 15.0.8229; 15.1.8300 through 15.1.8327; 15.2.8400 through 15.2.8421
CVE-2024-4882
5.3
0%
Jul 8
URL Redirection to Arbitrary Site Exists in Sitefinity
Affected: before 15.1.8322.0
CVE-2024-11626
4.8
0%
Jan 7
Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue…
Affected: 4.0 through 14.4.8142; 15.0.8200 through 15.0.8229; 15.1.8300 through 15.1.8327; 15.2.8400 through 15.2.8421
Showing 4