CVE-2021-47712

6.9 mediumEPSS 0.2%

Medium (6.9) in kentico xperience. EPSS 0.2% chance of exploitation in the next 30 days.

A cryptography vulnerability in Kentico Xperience allows attackers to potentially manipulate URL hash values through existing hashing mechanisms. The hotfix introduces an additional security layer to prevent hash value reuse and potential exploitation.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2025-12-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kentico:xperience

References

https://devnet.kentico.com/download/hotfixes
https://www.vulncheck.com/advisories/kentico-xperience-url-hashing-cryptography-vulnerability

Check your stack JSON