CVE-2024-11627

HIGH EPSS 23.0%
Published Jan 7, 20251y ago · Modified Jun 17, 20262w ago
8.1 CVSS 3.1
High
Find Similar
Published Jan 7, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

: Insufficient Session Expiration vulnerability in Progress Sitefinity allows : Session Fixation.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.

CVSS Details

Base Score
8.1
Exploitability
2.8
Impact
5.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality High
Integrity High
Availability None

Threat Intelligence

EPSS Exploit Probability
23.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-613

Affected Products 4

VendorProductVersionRange
progresssitefinity*≥4.0  –  <14.4.8143
progresssitefinity*≥15.0.8200  –  <15.0.8230
progresssitefinity*≥15.1.8300  –  <15.1.8328
progresssitefinity*≥15.2.8400  –  <15.2.8422

References 2

  • community.progress.com https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2024-11625-and-CVE-2024-11626-January-2025
    Not Applicable
  • progress.com https://www.progress.com/sitefinity-cms
    Product

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.