Product by Kentico

    Kentico Xperience

    51 known vulnerabilities in Kentico Xperience (Kentico), 4 of them actively exploited (CISA KEV).

    Key figures

    51

    Vulnerabilities

    4

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Kentico Xperience (Kentico)
    CriticalCVE-2025-2747

    Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass

    In CISA KEV

    		9.8
    CriticalCVE-2025-2746

    Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass

    In CISA KEV

    		9.8
    CriticalCVE-2019-10068

    Kentico Xperience Deserialization of Untrusted Data Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2025-2749

    Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE

    In CISA KEV

    		7.2
    CriticalCVE-2017-17736

    Kentico Xperience: security vulnerability

    		9.8
    MediumCVE-2025-2748

    Kentico Xperience stored cross-site scripting in multiple-file upload functionality

    		6.1
    HighCVE-2018-7046

    Kentico Xperience: Code Execution

    		7.2
    CriticalCVE-2019-12102

    Kentico Xperience: security vulnerability

    		9.1
    CriticalCVE-2025-32370

    Kentico Xperience: Hidden Functionality

    		7.2
    HighCVE-2018-19453

    Kentico Xperience: security vulnerability

    		8.8
    HighCVE-2018-5282

    Kentico Xperience: Stack-Based Buffer Overflow

    		7.8
    MediumCVE-2019-19493

    Kentico Xperience: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2019-6242

    Kentico Xperience: security vulnerability

    		7.2
    HighCVE-2022-32387

    Kentico Xperience: Denial of Service

    		7.5
    HighCVE-2018-6843

    Kentico Xperience: SQL Injection

    		7.2
    HighCVE-2023-53934

    Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service

    		7.5
    HighCVE-2025-2794

    Kentico Xperience <= 13.0.180 Unsafe Reflection

    		—
    HighCVE-2019-25229

    Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File Upload

    		8.8
    HighCVE-2020-36890

    Kentico Xperience <= 10 Administrator Access Control Bypass

    		7.2
    HighCVE-2021-47711

    Kentico Xperience <= 13.0.52 Online Marketing Macros SQL Injection

    		8.8
    MediumCVE-2020-24794

    Kentico Xperience: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-46163

    Kentico Xperience: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2022-50686

    Kentico Xperience <= 12.0 Portal Engine Form Control Information Disclosure

    		7.5
    MediumCVE-2022-29287

    Kentico Xperience: security vulnerability

    		4.9
    HighCVE-2025-5591

    Stored Cross-site Scripting (XSS) in Kentico Xperience 13

    		5.4

    All vulnerabilities in search

    News

    All products by Kentico