Kentico

Czech Republic Proprietary www.kentico.com ↗ ⚠ 2 CISA KEV
D
RISKY
29
Total CVEs
3
Crit / High
2
Medium
8%
Unpatched
0%
Patched
7.3
Avg CVSS
2
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
8%
Under Review
92%
✓ 0 patched ✗ 3 unpatched ~ 35 under review
▸ Intelligence by Audience
PoC Available
0 / 20 shown
CISA KEV (Exploited)
2
Shodan Dorks
ssl:"kentico" port:443
org:"Kentico" http.status:200
Top EPSS (Exploitation Probability)
CVE-2023-53934 0.43% exploitation probability
CVE-2022-50686 0.31% exploitation probability
CVE-2024-58320 0.27% exploitation probability
CVE-2022-50681 0.22% exploitation probability
CVE-2022-50682 0.21% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
29
Critical severity
1
Actively exploited (CISA)
2
Unpatched ratio
8%
Avg CVSS score
7.3
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-07-08
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
CISA Warns of Exploited Apple, Kentico, Microsoft Vulnerabilities - SecurityWeek
SecurityWeek 2025-10-21
Five New Exploited Bugs Land in CISA's Catalog — Oracle and Microsoft Among Targets - The Hacker News
The Hacker News 2025-10-20
Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities - SecurityWeek
SecurityWeek 2026-04-21
Hackers Are Exploiting Nearly One in Four Vulnerabilities Before Defenders Get a CVE - CyberSecurityNews
CyberSecurityNews 2026-07-30
UK police data lapse exposed highly sensitive records, watchdog says - Cybernews
Cybernews 2026-08-17
CISA warns of Windows SMB flaw under active exploitation (CVE-2025-33073) - Help Net Security
Help Net Security 2025-10-21
▸ Recent CVEs showing 20 of 38
CVE IDSeverityPatchEPSSDate
CVE-2026-105046 4.3 MEDIUM UNKNOWN / UNPATCHED 0.17% 2026-10-02
CVE-2025-5591 7.7 HIGH UNKNOWN / UNPATCHED 0.17% 2026-01-05
CVE-2024-58323 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2024-58322 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2024-58321 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2024-58320 6.9 MEDIUM PATCH UNDER REVIEW 0.27% 2025-12-18
CVE-2024-58319 5.1 MEDIUM PATCH UNDER REVIEW 0.19% 2025-12-18
CVE-2024-58318 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2024-58317 6.9 MEDIUM PATCH UNDER REVIEW 0.19% 2025-12-18
CVE-2023-53934 8.7 HIGH PATCH UNDER REVIEW 0.43% 2025-12-18
CVE-2023-53738 5.1 MEDIUM PATCH UNDER REVIEW 0.20% 2025-12-18
CVE-2023-53737 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2023-53736 5.1 MEDIUM PATCH UNDER REVIEW 0.20% 2025-12-18
CVE-2022-50686 6.9 MEDIUM PATCH UNDER REVIEW 0.31% 2025-12-18
CVE-2022-50685 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2022-50684 5.1 MEDIUM PATCH UNDER REVIEW 0.20% 2025-12-18
CVE-2022-50683 5.1 MEDIUM PATCH UNDER REVIEW 0.17% 2025-12-18
CVE-2022-50682 6.9 MEDIUM PATCH UNDER REVIEW 0.21% 2025-12-18
CVE-2022-50681 5.1 MEDIUM PATCH UNDER REVIEW 0.22% 2025-12-18
CVE-2022-50680 5.1 MEDIUM PATCH UNDER REVIEW 0.21% 2025-12-18
View all 38 CVEs for Kentico →
▸Intel
HQBrno, Czech Republic
Founded2004
CEOPetr Palas
CountryCzech Republic
LicenseProprietary
Trust ScoreD — RISKY
Max CVSS9.8
Last Updated2026-07-08
▸Top Weaknesses
CWE-79
Cross-Site Scripting (XSS)
18 occurrences in Kentico CVEs (62% of total)
CWE-79 ⓘ
18
CWE-200
Sensitive Information Exposure
2 occurrences in Kentico CVEs (7% of total)
CWE-200 ⓘ
2
CWE-434
Unrestricted File Upload
2 occurrences in Kentico CVEs (7% of total)
CWE-434 ⓘ
2
CWE-470
Unknown Weakness Type
1 occurrence in Kentico CVEs (3% of total)
CWE-470 ⓘ
1
CWE-209
Unknown Weakness Type
1 occurrence in Kentico CVEs (3% of total)
CWE-209 ⓘ
1
CWE-22
Unknown Weakness Type
1 occurrence in Kentico CVEs (3% of total)
CWE-22 ⓘ
1
CWE-20
Unknown Weakness Type
1 occurrence in Kentico CVEs (3% of total)
CWE-20 ⓘ
1
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)
Unknown Weakness Type
1 occurrence in Kentico CVEs (3% of total)
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) ⓘ
1
▸Company Profile

Kentico is a Czech-based software company that develops a digital experience platform (DXP) and content management system (CMS) for building websites, online stores, and intranets. Its flagship product, Kentico Xperience, is used by enterprises and mid-market organizations to manage content, marketing automation, and e-commerce. The platform's widespread deployment makes it a relevant target for vulnerability research, with 36 CVEs tracked as of the current database.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Patch Speed ⓘ Poor (>65% open)
8% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€669K
Est. GDPR High
€6.7M

Based on 1 critical CVEs, 2 CISA KEV, 97% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Kentico D valtersit.com