Skip to content
Sitecore Cms vulnerabilities
-
sitecore experience platform, managed cloud, content mangement system (cms) +2 more
Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
CVE-2022-4979
5.1 Medium
-
global interactive design media software inc. content management system (cms), sitecore experience platform (xp) +1 more
Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path
CVE-2015-10142
6.9 Medium
-
sitecore cms
Multiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow...
CVE-2019-11198
6.1 Medium
-
sitecore cms, cms and experience platform (xp) +1 more
Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an...
CVE-2019-9875
In KEV
EPSS 25.4%
8.8 High
-
sitecore cms, cms and experience platform (xp), experience platform +2 more
Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in...
CVE-2019-9874
In KEV
EPSS 83.7%
9.8 Critical
-
sitecore cms
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi...
CVE-2017-11440
4.9 Medium
-
sitecore cms
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.
CVE-2017-11439
5.4 Medium
-
sitecore cms
Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows...
CVE-2014-100004
4.3 Medium
-
sitecore cms
Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2...
CVE-2009-2163
Public exploit
4.3 Medium
-
sitecore cms
Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote...
CVE-2009-1055
4.0 Medium