CVE-2024-11625
Information Exposure Through an Error Message vulnerability in Progress Software Corporation Sitefinity.This issue affects Sitefinity: from 4.0 through 14.4.8142, from 15.0.8200 through 15.0.8229, from 15.1.8300 through 15.1.8327, from 15.2.8400 through 15.2.8421.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.7
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L
- EPSS probability
- 0.30%
- CWE
- CWE-209
- Published
- 2025-01-07
- Last modified
- 2026-03-13
Affected products
- Progress Software Corporation Sitefinity
- Progress Software Corporation Sitefinity
- Progress Software Corporation Sitefinity
- Progress Software Corporation Sitefinity
Weakness type
Related vulnerabilities
- CVE-2025-68110 — ChurchCRM discloses database information on error message
- CVE-2025-62168 — Squid vulnerable to information disclosure via authentication credential leakage in error handling
- CVE-2025-47813 — loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a
- CVE-2026-33192 — free5GC UDM incorrectly returns 500 for empty supi path parameter in PATCH sdm-subscriptions reques
- CVE-2025-71282 — XenForo Path Disclosure via open_basedir Exceptions
- CVE-2025-36003 — IBM Security Verify Governance Identity Manager information disclosure
- CVE-2025-23320 — NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker c
- CVE-2022-50686 — Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure