Skip to content
Sitecore Experience Manager vulnerabilities
-
sitecore experience platform (xp), experience manager (xm) +1 more
Sitecore Experience Platform Cross-Site Scripting Vulnerability
CVE-2025-53692
7.1 High
-
sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more
Sitecore Products ViewState Deserialization Vulnerability
CVE-2025-53690
In KEVPublic exploit
EPSS 60.7%
9.0 Critical
-
sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 more
Sitecore Experience Remote Code Execution through Insecure Deserialization
CVE-2025-53691
Public exploit
8.8 High
-
sitecore experience platform (xp), experience manager, experience platform +3 more +5 more
HTML Cache Poisoning through Unsafe Reflections
CVE-2025-53693
Public exploit
EPSS 20.3%
9.8 Critical
-
sitecore experience platform (xp), experience manager, experience platform +3 more +5 more
Information Disclosure in ItemServices API
CVE-2025-53694
Public exploit
7.5 High
-
sitecore experience commerce (xc), experience manager (xm), experience platform (xp) +1 more +3 more
Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read
CVE-2025-34139
8.7 High
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip
CVE-2025-34510
Public exploit
EPSS 24.8%
8.8 High
-
sitecore experience manager, experience platform, experience commerce +1 more +3 more
Sitecore XM and XP Hardcoded Credentials
CVE-2025-34509
EPSS 55.9%
7.5 High
-
adobe experience manager, experience manager cloud service +1 more
Open Redirect on AEM Target
CVE-2023-29307
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Weak Cryptography for Passwords Security feature bypass
CVE-2023-22271
5.3 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22269
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22266
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22265
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22264
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22263
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22262
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22261
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22260
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22259
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22258
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22257
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22256
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22254
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22253
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22252
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44510
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2022-44488
3.5 Low
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44474
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44471
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44470
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44467
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44466
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44465
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44463
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42365
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42364
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42362
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42357
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42356
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42354
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42352
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42350
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42349
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42348
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42346
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42345
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-35695
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-35693
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-30679
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44473
5.4 Medium
- Show olderLoading…