Approved changes feed: RSS · Atom

cpe:2.3:a:kentico:xperience:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKentico (f19b4bb1-ef96-5d93-959f-2df9c0fe8b14)
ProductXperience (dd7315cf-f48c-58c2-8a5e-d239b57800f2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5591 vulnerable 2026-06-08 07:37:25.230624 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32370 vulnerable 2026-06-08 07:18:59.497795 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32369 vulnerable 2026-06-08 07:18:59.497320 Details available
MEDIUM (6.4)
Kentico Xperience before 13.0.181 allows authenticated users to distribute malicious content (for stored XSS) via certain interactions with the media library file upload feature.
Published: 2025-04-06T00:00:00.000Z
Updated: 2025-04-07T14:10:54.321Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2794 vulnerable 2026-06-08 07:16:58.339404 Kentico Xperience <= 13.0.180 Unsafe Reflection
An unsafe reflection vulnerability in Kentico Xperience allows an unauthenticated attacker to kill the current process, leading to a Denial-of-Service condition. This issue affects Xperience: through 13.0.180.
Published: 2025-03-31T16:22:48.521Z
Updated: 2025-11-19T12:09:19.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2749 vulnerable 2026-06-08 07:16:58.171981 Kentico Xperience <= 13.0.178 Staging Media File Upload Authenticated RCE
HIGH (7.2)
An authenticated remote code execution in Kentico Xperience allows authenticated users Staging Sync Server to upload arbitrary data to path relative locations. This results in path traversal and arbitrary file upload, including content that can be executed server side leading to remote code execution.This issue affects Kentico Xperience through 13.0.178.
Published: 2025-03-24T18:18:07.228Z
Updated: 2026-04-21T03:55:36.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2748 vulnerable 2026-06-08 07:16:58.171617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2747 vulnerable 2026-06-08 07:16:58.171172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2746 vulnerable 2026-06-08 07:16:58.170608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58323 vulnerable 2026-06-08 06:56:14.429917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58322 vulnerable 2026-06-08 06:56:14.429622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58321 vulnerable 2026-06-08 06:56:14.429310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58320 vulnerable 2026-06-08 06:56:14.428877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58319 vulnerable 2026-06-08 06:56:14.428585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58318 vulnerable 2026-06-08 06:56:14.428266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-58317 vulnerable 2026-06-08 06:56:14.427869 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-53934 vulnerable 2026-06-08 06:19:40.051481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-53738 vulnerable 2026-06-08 06:17:56.904323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-53737 vulnerable 2026-06-08 06:17:56.904001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-53736 vulnerable 2026-06-08 06:17:56.903409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50686 vulnerable 2026-06-08 05:52:03.435995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50685 vulnerable 2026-06-08 05:52:03.435626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50684 vulnerable 2026-06-08 05:52:03.435251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50683 vulnerable 2026-06-08 05:52:03.434946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50682 vulnerable 2026-06-08 05:52:03.434649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50681 vulnerable 2026-06-08 05:52:03.434325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-50680 vulnerable 2026-06-08 05:52:03.433821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32387 vulnerable 2026-06-08 05:44:43.291589 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29287 vulnerable 2026-06-08 05:42:47.593916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47712 vulnerable 2026-06-08 05:38:07.445564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47711 vulnerable 2026-06-08 05:38:07.445188 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43991 vulnerable 2026-06-08 05:36:44.716530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36891 vulnerable 2026-06-08 05:25:49.786820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36890 vulnerable 2026-06-08 05:25:49.786475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36889 vulnerable 2026-06-08 05:25:49.785945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24794 vulnerable 2026-06-08 05:22:35.641881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25230 vulnerable 2026-06-08 05:13:42.092899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25229 vulnerable 2026-06-08 05:13:42.092584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25228 vulnerable 2026-06-08 05:13:42.092213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19493 vulnerable 2026-06-08 05:13:22.994722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12102 vulnerable 2026-06-08 05:12:38.550230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10068 vulnerable 2026-06-08 05:12:22.094790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7205 vulnerable 2026-06-08 05:11:55.165737 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-7046 vulnerable 2026-06-08 05:11:54.740546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6843 vulnerable 2026-06-08 05:11:54.295029 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6842 vulnerable 2026-06-08 05:11:54.294622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5282 vulnerable 2026-06-08 05:11:50.565999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19453 vulnerable 2026-06-08 05:11:15.761566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-17736 vulnerable 2026-06-08 05:09:09.808169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.