Sitefinity@4.0 Security Vulnerabilities and Issues — Sitefinity@4.0 CVE List

Lucene search

ProgressSitefinity4.0

5 matches found

CVE•added 2018/09/28 12:29 a.m.•45 views

CVE-2018-17055

An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads.

7.5CVSS7.3AI score0.00261EPSS

CVE•added 2025/01/07 8:15 a.m.•45 views

CVE-2024-11626

Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15...

8.4CVSS8.5AI score0.00063EPSS

CVE•added 2025/01/07 8:15 a.m.•42 views

CVE-2024-11627

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

8.1CVSS6.6AI score0.00068EPSS

CVE•added 2025/01/07 8:15 a.m.•39 views

CVE-2024-11625

Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

7.7CVSS7.6AI score0.00063EPSS

CVE•added 2023/12/20 2:15 p.m.•35 views

CVE-2023-6784

A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.

4.7CVSS4.7AI score0.00023EPSS