High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-28	CVE-2018-17055	Unrestricted Upload of File with Dangerous Type vulnerability in Progress Sitefinity An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads. network low complexity progress CWE-434	7.5
2018-02-12	CVE-2017-18179	Improper Authentication vulnerability in Progress Sitefinity 9.1 Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a session termination. network low complexity progress CWE-287	8.8