Vulnerabilidades en Kentico

37 resultados
Análisis Vexday

A Kentico apresenta 37 vulnerabilidades registradas, das quais 3 estão sob ataque ativo, com predominância de falhas de injeção (CWE-79) e apenas 2 classificadas como críticas. A ausência de divulgações nos últimos 90 dias sugere risco estabilizado, porém a exploração ativa desses problemas demanda atenção imediata para mitigação das 3 vulnerabilidades em movimento.

CVE-2020-36891MEDIUMKentico Xperience <= 12.0.49 File Upload Stored XSSEPSS 0.2%CVE-2020-36889MEDIUMKentico Xperience <= 12.0.90 Administration Interface Stored XSSEPSS 0.2%CVE-2022-50682MEDIUMKentico Xperience <= 13.0.79 Routing Engine CRLF InjectionEPSS 0.2%CVE-2022-50680MEDIUMKentico Xperience <= 13.0.92 Email Marketing Stored XSSEPSS 0.2%CVE-2023-53738MEDIUMKentico Xperience <= 13.0.109 Page Preview Reflected XSSEPSS 0.2%CVE-2023-53736MEDIUMKentico Xperience <= 13.0.120 Administration Interface Reflected XSSEPSS 0.2%CVE-2022-50684MEDIUMKentico Xperience <= 13.0.71 Form Emails HTML InjectionEPSS 0.2%CVE-2024-58317MEDIUMKentico Xperience <= 13.0.164 Cookie Security ConfigurationEPSS 0.2%CVE-2024-58319MEDIUMKentico Xperience <= 13.0.160 Pages Dashboard Widget Reflected XSSEPSS 0.2%CVE-2023-53737MEDIUMKentico Xperience <= 13.0.101 Localization Application Stored XSSEPSS 0.1%CVE-2025-5591HIGHStored Cross-site Scripting (XSS) in Kentico Xperience 13EPSS 0.1%CVE-2024-58318MEDIUMKentico Xperience <= 13.0.162 Rich Text Editor Stored XSSEPSS 0.1%CVE-2024-58322MEDIUMKentico Xperience <= 13.0.158 Shipping Options Stored XSSEPSS 0.1%CVE-2024-58321MEDIUMKentico Xperience <= 13.0.159 Form Validation Stored XSSEPSS 0.1%CVE-2024-58323MEDIUMKentico Xperience <= 13.0.158 Checkbox Form Component Stored XSSEPSS 0.1%CVE-2022-50683MEDIUMKentico Xperience <= 13.0.74 Form Configuration Stored XSSEPSS 0.1%CVE-2022-50685MEDIUMKentico Xperience <= 13.0.56 File Upload Stored XSSEPSS 0.1%