Sitefinity Security Vulnerabilities and Issues — Sitefinity CVE List

Lucene search

ProgressSitefinity

4 matches found

CVE•added 2017/07/03 7:29 p.m.•1267 views

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading...

9.8CVSS9.2AI score0.87802EPSS

In wildWeb

CVE•added 2019/11/26 6:15 p.m.•61 views

CVE-2019-17392

Progress Sitefinity 12.1 has a Weak Password Recovery Mechanism for a Forgotten Password because the HTTP Host header is mishandled.

9.8CVSS9.3AI score0.00485EPSS

CVE•added 2018/01/08 7:29 p.m.•48 views

CVE-2017-15883

Sitefinity 5.1, 5.2, 5.3, 5.4, 6.x, 7.x, 8.x, 9.x, and 10.x allow remote attackers to bypass authentication and consequently cause a denial of service on load balanced sites or gain privileges via vectors related to weak cryptography.

9.8CVSS9.4AI score0.0014EPSS

CVE•added 2023/04/10 3:15 p.m.•37 views

CVE-2023-29375

An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.

9.8CVSS9.4AI score0.01201EPSS