Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

SiteServer vulnerabilities

6 published CVEs name SiteServer among the affected products.

Newest CVEs

  • CVE-2026-124575

    SiteServer SSCMS Admin-Login CAPTCHA LoginController.Submit.cs LoginController.Submit excessive authentication

    SiteServer · SSCMS

    Medium6.3
  • CVE-2026-111658

    SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API

    SiteServer · SSCMS

    Medium5.1
  • CVE-2026-82486

    SiteServer SSCMS Agent Installation Workflow access control

    SiteServer · SSCMS

    Low2.3
  • CVE-2026-7435

    SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString

    siteserver · SSCMS

    High8.6
  • CVE-2026-7429

    SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing

    siteserver · SSCMS

    Low2.1
  • CVE-2023-2862

    SiteServer CMS search cross site scripting

    SiteServer · CMS

    Low3.5