sitecore

Top products

The 15 most recently published vulnerabilities affecting sitecore.

• CVE-2025-53692Sitecore Experience Platform Cross-Site Scripting Vulnerability7.1Sep 21, 2025
• CVE-2025-53690Sitecore Products ViewState Deserialization VulnerabilityKEV9.0Sep 3, 2025
• CVE-2025-53691Sitecore Experience Remote Code Execution through Insecure Deserialization8.8Sep 3, 2025
• CVE-2025-53693HTML Cache Poisoning through Unsafe Reflections9.8Sep 3, 2025
• CVE-2025-53694Information Disclosure in ItemServices API7.5Sep 3, 2025
• CVE-2022-4979Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSSJul 25, 2025
• CVE-2015-10142Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known PathJul 25, 2025
• CVE-2025-34139Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadJul 25, 2025
• CVE-2020-36850Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information DisclosureJul 25, 2025
• CVE-2025-34511Sitecore PowerShell Extension RCE via Unrestricted Upload8.8Jun 17, 2025
• CVE-2025-34510Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip8.8Jun 17, 2025
• CVE-2025-34509Sitecore XM and XP Hardcoded Credentials7.5Jun 17, 2025
• CVE-2025-27218Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.5.3Feb 20, 2025
• CVE-2024-46938An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can...7.5Sep 15, 2024
• CVE-2023-35813Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.9.8Jun 17, 2023