Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Progress Software

Progress Software Sitefinity vulnerabilities

5 published CVEs name Progress Software Sitefinity among the affected products.

All 5 in the listAtom feed of new CVEs
Published CVEs
5
Last 12 months
5
Critical
2
Known exploited
0

Critical 2High 3Medium 0Low 0Not scored 0

Newest CVEs

  • CVE-2026-7313

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    Progress Software · Sitefinity

    High8.7
  • CVE-2026-7312

    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

    Progress Software · Sitefinity

    Critical10.0
  • CVE-2026-7201

    CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity

    Progress Software · Sitefinity

    High8.8
  • CVE-2026-7198

    CWE-284: Improper Access Control in web services in Progress Sitefinity

    Progress Software · Sitefinity

    Critical9.8
  • CVE-2026-7195

    CWE-20: Improper Input Validation in web services in Progress Sitefinity

    Progress Software · Sitefinity

    High8.8

Most common weaknesses

  1. CWE-522 2
  2. CWE-20 Improper input validation1
  3. CWE-284 Improper access control1
  4. CWE-639 Authorization bypass through a user-controlled key (IDOR)1