PULSE
ESEN
FEED
ransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technology
← Todos os CVEs
CVE Watch—

CVE-2019-10068

Kentico Xperience Deserialization of Untrusted Data Vulnerability

CVSS

—

Sem CVSS

EPSS

95.1%

p100

KEV

SIM

25 de mar. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
95.1%EPSS · 30 dias95.1%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Kentico / Xperience

Vulnerabilidade

Kentico Xperience Deserialization of Untrusted Data Vulnerability

Adicionado ao KEV

25 de mar. de 2022

Corrigir até

15 de abr. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-10068

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.