Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

UnknownKentico Xperience CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Vuln · CVE-2025-2748 · Kentico · Xperience CMS · CVE.org · FIRST EPSS · VulnCheck KEV · KenticoPatch nowKEVEPSS 60.59%Jun 7, 2025
Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityVuln · CVE-2025-2747 · Kentico · Xperience CMS · CISA KEV · CVE.org · FIRST EPSS · KenticoPatch nowKEVEPSS 97.17%Mar 24, 2025
Critical9.8Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityVuln · CVE-2025-2746 · Kentico · Xperience CMS · CISA KEV · CVE.org · FIRST EPSS · KenticoPatch nowKEVEPSS 74.06%Mar 24, 2025
Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityVuln · CVE-2019-10068 · Kentico · Xperience CMS · CISA KEV · CVE.org · FIRST EPSS · KenticoPatch nowKEVEPSS 95.07%Mar 26, 2019