WID-SEC-W-2025-0015

DeutschShown in its original language — a full translation is planned for a future version.

Progress Software Sitefinity: Mehrere Schwachstellen

view advisory published 2025-01-06

Ein entfernter Angreifer kann mehrere Schwachstellen in Progress Software Sitefinity ausnutzen, um Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-11626US	medium4.8	0.36% (30th)	—	2025-01-07
Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affe…
CVE-2024-11625US	medium5.3	0.30% (23rd)	—	2025-01-07
Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 th…

references

External citations — patches, advisories, analysis.

Sitefinity Security Advisory vom 2025-01-06external
WID-SEC-W-2025-0015 - CSAF Versionself
WID-SEC-2025-0015 - Portal Versionself
CVE Record Information vom 2025-01-06external
CVE Record Information vom 2025-01-06external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan