Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Denkgroot

First CVE: Sep 7, 2017Active for: 9 yearsTotal CVEs: 6

Denkgroot maintains a narrowly scoped but prominent web application product, Spina, that faces exposure to application-layer input-handling vulnerabilities. Its disclosures cluster around cross-site request forgery and cross-site scripting weaknesses, which recur across the product and skew toward serious severity outcomes. Current exploitation activity, severity breakdowns, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
2.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 80% of tracked vendors
7.5
Avg CVSS Score
Higher Avg CVSS Score than 71% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Denkgroot over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 7, 2017
8 years ago
Most Recent CVE
Jul 25, 2024
729 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-41603CRITICAL
Spina CMS v2.18.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the URI /admin/layout.
Jul 19, 20249.629NONO
CVE-2024-7106HIGH
A vulnerability classified as problematic was found in Spina CMS 2.18.0. Affected by this vulnerability is an unknown functionality of the file /admin/media_folders. The manipulati
Jul 25, 20248.824NONO
CVE-2024-41602HIGH
Cross Site Request Forgery vulnerability in Spina CMS v.2.18.0 and before allows a remote attacker to escalate privileges via a crafted URL
Jul 19, 20248.824NONO
CVE-2015-4619HIGH
Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.
Sep 7, 20178.822NONO
CVE-2023-3445MEDIUM
Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1.
Jun 28, 20234.817NONO
CVE-2024-7065MEDIUM
A vulnerability was found in Spina CMS up to 2.18.0. It has been classified as problematic. Affected is an unknown function of the file /admin/pages/. The manipulation leads to cro
Jul 24, 20244.316NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
33%
50%
17%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required6 (100.0%)
Privileges Required
Low0 (0.0%)
High1 (16.7%)
None5 (83.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Denkgroot.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Denkgroot — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Denkgroot's Products

View all 3 CNAs →

Top CWEs