Kentico Xperience vulnerabilities
50 published vulnerabilities in Kentico Xperience, 4 of them exploited in the wild. The most were published in 2022 (9), and 8 so far in 2025.
Kentico Xperience vulnerabilities by year
2017
2018
2019
2020
2021
2022
2023
2024
2025
Most exploited Kentico Xperience vulnerabilities
- CVE-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel
- CVE-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel
- CVE-2019-10068 Kentico Xperience Deserialization of Untrusted Data
- CVE-2025-2749 Kentico Xperience Path Traversal
- CVE-2017-17736 Missing authorization in n/a
- CVE-2019-12102 Missing authorization in n/a
- CVE-2018-19453 File upload in n/a
- CVE-2019-25229 Kentico Xperience <= 12.0.29 MVC Forms Unrestricted File Upload
- CVE-2021-47711 Kentico Xperience <= 13.0.52 Online Marketing Macros SQL Injection
- CVE-2023-53934 Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service
- CVE-2025-2794 Kentico Xperience <= 13.0.180 Unsafe Reflection
- CVE-2020-36890 Kentico Xperience <= 10 Administrator Access Control Bypass
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.