Progress Software Sitefinity

Name: Progress Software Sitefinity
Brand: Progress Software

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

unpatched

critical

by severity

0critical2high3medium0low

updated 2026-10-27

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-3600US	—	26.3% (98th)	—	13.3.7651	2025-05-14	6 versions
CVE-2026-7195US	high8.1	0.47% (41st)	—	15.2.8441	2026-06-02	14 versions
CVE-2026-7198US	—	0.44% (38th)	—	15.0.8234	2026-06-02	8 versions
CVE-2026-7312US	high7.5	0.44% (38th)	—	15.3.8531	2026-06-02	13 versions
CVE-2024-11626US	medium4.8	0.36% (30th)	—	14.4 8143	2025-01-07	4 versions
CVE-2026-7201US	—	0.35% (28th)	—	15.0.8234	2026-06-02	10 versions
CVE-2025-1968US	—	0.32% (25th)	—	14.4.8145	2025-04-09	5 versions
CVE-2026-7313US	medium4.9	0.32% (25th)	—	15.3.8531	2026-06-02	8 versions
CVE-2024-11625US	medium5.3	0.30% (23rd)	—	14.4 8143	2025-01-07	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-522Insufficiently Protected Credentials2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-470Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.