Sitecore vulnerabilities

Products

• Experience Manager 104
• Experience Platform 21
• Experience Manager 11
• Experience Commerce 10
• Managed Cloud 9
• Cms 8
• Experience Platform (xp) 7
• Experience Manager (xm) 3
• Experience Platform 3
• Experience Manager (xm) 3
• Cms And Experience Platform (xp) 2
• Crm 2
• Managed Cloud 2
• Powershell Extension 2
• Sitecore.net 2

Newest

• sitecore experience platform (xp), experience manager (xm) +1 more Sitecore Experience Platform Cross-Site Scripting Vulnerability CVE-2025-53692 7.1 HighSeptember 21, 2025
• sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more Sitecore Products ViewState Deserialization Vulnerability CVE-2025-53690 In KEVPublic exploit EPSS 60.7% 9.0 CriticalSeptember 3, 2025
• sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 more Sitecore Experience Remote Code Execution through Insecure Deserialization CVE-2025-53691 Public exploit 8.8 HighSeptember 3, 2025
• sitecore experience platform (xp), experience manager, experience platform +3 more +5 more HTML Cache Poisoning through Unsafe Reflections CVE-2025-53693 Public exploit EPSS 20.3% 9.8 CriticalSeptember 3, 2025
• sitecore experience platform (xp), experience manager, experience platform +3 more +5 more Information Disclosure in ItemServices API CVE-2025-53694 Public exploit 7.5 HighSeptember 3, 2025
• sitecore experience platform, managed cloud, content mangement system (cms) +2 more Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS CVE-2022-4979 5.1 MediumJuly 25, 2025
• global interactive design media software inc. content management system (cms), sitecore experience platform (xp) +1 more Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path CVE-2015-10142 6.9 MediumJuly 25, 2025
• sitecore experience commerce (xc), experience manager (xm), experience platform (xp) +1 more +3 more Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read CVE-2025-34139 8.7 HighJuly 25, 2025
• sitecore jss react sample application Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure CVE-2020-36850 8.7 HighJuly 25, 2025
• sitecore experience manager, experience platform, powershell extension +2 more +4 more Sitecore PowerShell Extension RCE via Unrestricted Upload CVE-2025-34511 Public exploit EPSS 30.4% 8.8 HighJune 17, 2025
• sitecore experience commerce, experience manager, experience platform +1 more +3 more Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip CVE-2025-34510 Public exploit EPSS 24.8% 8.8 HighJune 17, 2025
• sitecore experience manager, experience platform, experience commerce +1 more +3 more Sitecore XM and XP Hardcoded Credentials CVE-2025-34509 EPSS 55.9% 7.5 HighJune 17, 2025
• sitecore experience commerce, experience manager, experience platform +2 more An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and... CVE-2024-46938 EPSS 46.8% 7.5 HighSeptember 15, 2024
• sitecore experience commerce, experience manager, experience platform +1 more +3 more Multiple Sitecore products allow remote code execution. This affects Experience Manager,... CVE-2023-35813 Public exploit EPSS 86.7% 9.8 CriticalJune 17, 2023
• adobe experience manager, experience manager cloud service +1 more Open Redirect on AEM Target CVE-2023-29307 5.4 MediumJune 15, 2023
• sitecore experience platform Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code... CVE-2023-33653 8.8 HighJune 6, 2023
• sitecore experience platform Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code... CVE-2023-33652 8.8 HighJune 6, 2023
• sitecore experience commerce, experience manager, experience platform +1 more +3 more An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM... CVE-2023-33651 7.5 HighJune 6, 2023
• sitecore experience platform Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote... CVE-2023-27068 9.8 CriticalMay 23, 2023
• sitecore experience platform Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote... CVE-2023-27067 7.5 HighMay 22, 2023
• sitecore experience platform Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows... CVE-2023-27066 6.5 MediumMay 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM Weak Cryptography for Passwords Security feature bypass CVE-2023-22271 5.3 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2023-22269 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22266 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22265 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22264 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22263 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22262 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22261 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22260 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22259 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22258 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22257 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2023-22256 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2023-22254 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2023-22253 5.4 MediumMarch 22, 2023
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2023-22252 5.4 MediumMarch 22, 2023
• sitecore experience manager, experience platform +1 more An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted... CVE-2023-26262 Public exploit 7.2 HighMarch 14, 2023
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44510 5.4 MediumDecember 22, 2022
• adobe experience manager, experience manager cloud service +1 more AEM URL Redirection to Untrusted Site Security feature bypass CVE-2022-44488 3.5 LowDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44474 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44471 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44470 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44467 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44466 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44465 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-44463 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-42365 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-42364 5.4 MediumDecember 19, 2022
• adobe experience manager, experience manager cloud service +1 more AEM Reflected XSS Arbitrary code execution CVE-2022-42362 5.4 MediumDecember 19, 2022
• Show olderLoading…