CWE-20: Improper Input Validation in web services in Progress Sitefinity_CVE-2026-7195

{
    "lastseen": "",
    "description": "CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4.x before 14.4.8152, 15.0.x before 15.0.8234, 15.1.x before 15.1.8335, 15.2.x before 15.2.8441, 15.3.x before 15.3.8531, and 15.4.x before 15.4.8630 allows a remote unauthenticated attacker to compromise the integrity and confidentiality of user accounts. Successful exploitation requires user interaction and a non-default site configuration.",
    "published": "2026-06-02T13:04:40.341Z",
    "modified": "2026-06-02T13:04:40.341Z",
    "type": "cve",
    "title": "CWE-20: Improper Input Validation in web services in Progress Sitefinity",
    "source": "ProgressSoftware",
    "references": "https://community.progress.com/s/article/Sitefinity-Security-Advisory-for-Addressing-Security-Vulnerabilities-CVE-2026-7312-CVE-2026-7198-CVE-2026-7195-CVE-2026-7201-CVE-2026-7313-May-2026",
    "id": "CVE-2026-7195",
    "bulletinFamily": "",
    "cwe": [
        "CWE-20"
    ],
    "cvelist": null,
    "sourceData": "Progress Software Sitefinity 14.1.0\nProgress Software Sitefinity 14.4.8100\nProgress Software Sitefinity 15.0.8200\nProgress Software Sitefinity 15.1.8300\nProgress Software Sitefinity 15.2.8400\nProgress Software Sitefinity 15.3.8500\nProgress Software Sitefinity 15.4.8600",
    "sourceHref": "",
    "cvss": {
        "score": 8.8,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Sitefinity",
    "version": "14.1.0",
    "vendor": "Progress Software",
    "ai_description": "Improper Input Validation vulnerability in Progress Sitefinity web services allows remote unauthenticated attackers to compromise user account integrity and confidentiality.",
    "ai_severity": "High",
    "ai_vendor": "Progress Software",
    "ai_product": "Sitefinity",
    "ai_version": "14.1.x, 14.2.x, 14.3.x, 14.4.x, 15.0.x, 15.1.x, 15.2.x, 15.3.x, 15.4.x",
    "ai_score": 8.8
}