GCVE - cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:progress:sitefinity:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Progress (`f9d80521-f73f-5a85-8df9-9306f2f67809`)
Product	Sitefinity (`6a195a8a-67a9-5e8c-915e-555606d96b98`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-1636`	vulnerable	2026-06-08 06:27:13.943252	Potential Cross-Site Scripting (XSS) in the page editing area HIGH (8) Potential Cross-Site Scripting (XSS) in the page editing area. Published: 2024-02-28T12:05:23.082Z Updated: 2024-08-01T19:14:11.892Z Open on db.gcve.eu Reference links https://www.progress.com/sitefinity-cms https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1632`	vulnerable	2026-06-08 06:27:13.884285	Incorrect access control in the Sitefinity backend HIGH (8.8) Low-privileged users with access to the Sitefinity backend may obtain sensitive information from the site's administrative area. Published: 2024-02-28T12:04:45.869Z Updated: 2024-08-02T19:28:52.380Z Open on db.gcve.eu Reference links https://www.progress.com/sitefinity-cms https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-1632-and-CVE-2024-1636-February-2024	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11627`	vulnerable	2026-06-08 06:23:50.017629	Details available MEDIUM (6.8) : Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421. Published: 2025-01-07T07:49:29.209Z Updated: 2025-01-07T15:36:18.738Z Open on db.gcve.eu Reference links https://www.progress.com/sitefinity-cms https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11626`	vulnerable	2026-06-08 06:23:50.017270	Details available HIGH (8.4) Improper Neutralization of Input During CMS Backend (adminstrative section) Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Progress Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421. Published: 2025-01-07T07:49:01.805Z Updated: 2025-01-07T15:37:28.107Z Open on db.gcve.eu Reference links https://www.progress.com/sitefinity-cms https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11625`	vulnerable	2026-06-08 06:23:50.016780	Details available HIGH (7.7) Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421. Published: 2025-01-07T07:48:32.620Z Updated: 2025-01-07T15:38:00.465Z Open on db.gcve.eu Reference links https://www.progress.com/sitefinity-cms https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-6784`	vulnerable	2026-06-08 06:21:55.825400	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29376`	vulnerable	2026-06-08 06:02:40.025736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-29375`	vulnerable	2026-06-08 06:02:40.025047	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-27636`	vulnerable	2026-06-08 05:57:42.162749	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7215`	vulnerable	2026-06-08 05:14:14.075653	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17392`	vulnerable	2026-06-08 05:13:10.457833	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-17055`	vulnerable	2026-06-08 05:11:05.892575	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-9248`	vulnerable	2026-06-08 05:10:09.528480	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.