Read the docs

Kentico

Records56All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Kentico records in CISA KEV
TI-2025-02402 Kentico Xperience Path Traversal Vulnerability Priority CRITICAL 91KEV 2026-04-20TI-2025-02399 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2025-10-20TI-2025-02400 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 100KEV 2025-10-20TI-2019-07394 Kentico Xperience Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records
Xperience 50 records CRITICAL Kentico Cms 3 records MEDIUM

Records

3 records in Kentico Cms · all components

TI-2015-06497 CVE-2015-7822 · GHSA-2p9m-c88w-j8wx

Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote…

Priority LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in Kentico CMS 8.2 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter name to CMSModules/AdminControls/Pages/UIPage.aspx or the (2) CMSBo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01126 Published 2015-10-21 No fix listed CWE-79
Open these records in search →