CVE-2025-2794
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 1, 2025
CWE ID 470
Summary
CVE-2025-2794 is a newly identified vulnerability in Kentico Xperience that poses a Denial-of-Service threat. An attacker, without authentication, can exploit an unsafe reflection vulnerability in the system, resulting in the termination of the current process. This vulnerability impacts Kentico Xperience versions up to and including 13.0.180.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Kentico