CVE-2026-7312
Essential information
- Published
- 02/06/2026 14:17
- Modified
- 02/06/2026 14:37
- Author
- —
- Creator
- —
- CVSS
- 10.0 CRITICAL (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- LOW
- Privileges required
- NONE
- User interaction
- NONE
- Scope
- CHANGED
- Confidentiality impact
- HIGH
- Integrity impact
- HIGH
- Availability impact
- NONE
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14.0.7700 to 14.4.8152, and 15.0.8200 to 15.0.8234, and 15.1.8300 to 15.1.8335, 15.2.8400 to 15.2.8441, 15.3.8500 to 15.3.8531, and 15.4.8600 to 15.4.8630 allows a remote unauthenticated attacker to obtain plain-text credentials used connect to Sitefinity Insight service. Successful exploitation requires active integration with Sitefinity Insight and non-default site configuration.
NVD status
- Status
- Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| progress / sitefinity | cpe:2.3:a:progress:sitefinity:14.0.7700-14.4.8152:*:*:*:*:*:*:* |
| progress / sitefinity | cpe:2.3:a:progress:sitefinity:15.0.8200-15.0.8234:*:*:*:*:*:*:* |
| progress / sitefinity | cpe:2.3:a:progress:sitefinity:15.1.8300-15.1.8335:*:*:*:*:*:*:* |
| progress / sitefinity | cpe:2.3:a:progress:sitefinity:15.2.8400-15.2.8441:*:*:*:*:*:*:* |
| progress / sitefinity | cpe:2.3:a:progress:sitefinity:15.3.8500-15.3.8531:*:*:*:*:*:*:* |
| progress / sitefinity | cpe:2.3:a:progress:sitefinity:15.4.8600-15.4.8630:*:*:*:*:*:*:* |