SiteServer vulnerabilities
6 published CVEs name SiteServer among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124575
SiteServer SSCMS Admin-Login CAPTCHA LoginController.Submit.cs LoginController.Submit excessive authentication
SiteServer · SSCMS
Medium6.3 - CVE-2026-111658
SiteServer SSCMS through 7.4.0 Cross-Site Authorization Bypass via Channels API
SiteServer · SSCMS
Medium5.1 - CVE-2026-82486
SiteServer SSCMS Agent Installation Workflow access control
SiteServer · SSCMS
Low2.3 - CVE-2026-7435
SSCMS v7.4.0 SQL Injection via stl:sqlContent queryString
siteserver · SSCMS
High8.6 - CVE-2026-7429
SSCMS v7.4.0 Reflected Cross-Site Scripting via STL Processing
siteserver · SSCMS
Low2.1 - CVE-2023-2862
SiteServer CMS search cross site scripting
SiteServer · CMS
Low3.5