Progress Sitefinity Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Progress Sitefinity Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-18639 — CVSS 6.1 (medium): Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List…
• CVE-2017-9140 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer…
• CVE-2018-17053 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers…
• CVE-2018-17054 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in Identity Server in Progress Sitefinity CMS versions 10.0 through 11.0 allows remote attackers…
• CVE-2018-17056 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in ServiceStack in Progress Sitefinity CMS versions 10.2 through 11.0 allows remote attackers to…