CVE-2023-6784
MEDIUMProgress Sitefinity 4.0-13.3.7648 - Phishing Email Distribution
Title source: llmDescription
A malicious user could potentially use the Sitefinity system for the distribution of phishing emails.
References (2)
Core 2
Core References
Product product
https://www.progress.com/sitefinity-cms
Scores
CVSS v3
4.7
EPSS
0.0002
EPSS Percentile
6.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-20
Status
published
Products (1)
progress/sitefinity
4.0 - 13.3.7648
Published
Dec 20, 2023
Tracked Since
Feb 18, 2026