Kentico Xperience
50 CVEs affecting Kentico Xperience. Latest disclosed: 2026-01-05. Critical: 5, High: 14.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2747 | Critical | 9.8 | 2025-03-24 | An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server… |
CVE-2025-2746 | Critical | 9.8 | 2025-03-24 | An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server password handling of empty SHA1 usernames… |
CVE-2019-10068 | Critical | 9.8 | 2019-03-26 | An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security… |
CVE-2017-17736 | Critical | 9.8 | 2018-03-23 | Kentico 9.0 before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to obtain Global Administrator access by visiting CMSInstall/install.aspx and then na… |
CVE-2019-12102 | Critical | 9.1 | 2019-05-22 | Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/formcontrols/liveselectors/insertimageorme… |
CVE-2021-47711 | High | 8.8 | 2025-12-18 | A SQL injection vulnerability in Kentico Xperience allows authenticated editors to inject malicious SQL queries via online marketing macro method parameters. T… |
CVE-2019-25229 | High | 8.8 | 2025-12-18 | An unrestricted file upload vulnerability in Kentico Xperience allows authenticated users with 'Read data' permissions to upload arbitrary file types via MVC f… |
CVE-2018-19453 | High | 8.8 | 2019-04-10 | Kentico CMS before 11.0.45 allows unrestricted upload of a file with a dangerous type. |
CVE-2018-5282 | High | 7.8 | 2018-01-08 | Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOT… |
CVE-2023-53934 | High | 7.5 | 2025-12-18 | A denial of service vulnerability in Kentico Xperience allows attackers to launch DoS attacks via specially crafted requests to the GetResource handler. Improp… |
CVE-2022-50686 | High | 7.5 | 2025-12-18 | An information disclosure vulnerability in Kentico Xperience allows attackers to view sensitive stack trace details via Portal Engine form control error messag… |
CVE-2021-47712 | High | 7.5 | 2025-12-18 | A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix in… |
CVE-2022-32387 | High | 7.5 | 2022-07-18 | In Kentico before 13.0.66, attackers can achieve Denial of Service via a crafted request to the GetResource handler. |
CVE-2020-36890 | High | 7.2 | 2025-12-18 | An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user privileges via unauthorized requests. Att… |
CVE-2025-32370 | High | 7.2 | 2025-04-06 | Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated uploads; however, because .zip is processed… |
CVE-2025-2749 | High | 7.2 | 2025-03-24 | An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations… |
CVE-2019-6242 | High | 7.2 | 2019-02-08 | Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. NOTE: the vendor considers this… |
CVE-2018-6843 | High | 7.2 | 2018-03-19 | Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface. |
CVE-2018-7046 | High | 7.2 | 2018-02-20 | Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary operating system commands in a dynamic .N… |
CVE-2021-43991 | Medium | 6.8 | 2021-12-03 | The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order X… |