Yüksek CISA KEV
CVE-2025-2747: Kentico Xperience CMS: aktif olarak istismar edilen açık
Açıklama (NVD)
Kentico Xperience CMS contains an authentication bypass using an alternate path or channel vulnerability that could allow an attacker to control administrative objects.
Özet bilgiler
- EPSS
- %97,17 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2025-10-20 · Son tarih: 2025-11-10
Gerekli aksiyon: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.