progress sitefinity
productUScpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
4critical5high13medium0low
updated 2026-10-27
01
vulnerabilities (24)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2017-9248US | critical9.8OT critical | KEV |
| CVE-2023-27636US | medium5.4 | Exploit |
| CVE-2017-18179US | high8.8 | — |
| CVE-2017-18178US | medium6.1 | — |
| CVE-2017-15883US | critical9.8 | — |
| CVE-2019-17392US | critical9.8 | — |
| CVE-2019-7215US | medium6.5 | — |
| CVE-2018-17055US | high7.5 | — |
| CVE-2023-29375US | critical9.8 | — |
| CVE-2017-18177US | medium5.4 | — |
| CVE-2017-18176US | medium5.4 | — |
| CVE-2017-18175US | medium5.4 | — |
| CVE-2024-1632US | medium6.5 | — |
| CVE-2026-7195US | high8.1 | — |
| CVE-2026-7198US | — | — |
| CVE-2026-7312US | high7.5 | — |
| CVE-2023-29376US | medium5.4 | — |
| CVE-2024-1636US | medium5.4 | — |
| CVE-2023-6784US | medium4.3 | — |
| CVE-2024-11626US | medium4.8 | — |
| CVE-2026-7201US | — | — |
| CVE-2024-11627US | high8.1 | — |
| CVE-2026-7313US | medium4.9 | — |
| CVE-2024-11625US | medium5.3 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
- CWE-522Insufficiently Protected Credentials3 CVEs
- CWE-20Improper Input Validation2 CVEs
- CWE-284Improper Access Control2 CVEs
- CWE-287Improper Authentication2 CVEs
- CWE-434Unrestricted Upload of File with Dangerous Type2 CVEs
- CWE-613Insufficient Session Expiration2 CVEs
- CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE24 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan