Sitecore Experience Platform vulnerabilities

• sitecore experience platform (xp), experience manager (xm) +1 more Sitecore Experience Platform Cross-Site Scripting Vulnerability CVE-2025-53692 7.1 HighSeptember 21, 2025
• sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more Sitecore Products ViewState Deserialization Vulnerability CVE-2025-53690 In KEVPublic exploit EPSS 60.7% 9.0 CriticalSeptember 3, 2025
• sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 more Sitecore Experience Remote Code Execution through Insecure Deserialization CVE-2025-53691 Public exploit 8.8 HighSeptember 3, 2025
• sitecore experience platform (xp), experience manager, experience platform +3 more +5 more HTML Cache Poisoning through Unsafe Reflections CVE-2025-53693 Public exploit EPSS 20.3% 9.8 CriticalSeptember 3, 2025
• sitecore experience platform (xp), experience manager, experience platform +3 more +5 more Information Disclosure in ItemServices API CVE-2025-53694 Public exploit 7.5 HighSeptember 3, 2025
• sitecore experience platform, managed cloud, content mangement system (cms) +2 more Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS CVE-2022-4979 5.1 MediumJuly 25, 2025
• global interactive design media software inc. content management system (cms), sitecore experience platform (xp) +1 more Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path CVE-2015-10142 6.9 MediumJuly 25, 2025
• sitecore experience commerce (xc), experience manager (xm), experience platform (xp) +1 more +3 more Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read CVE-2025-34139 8.7 HighJuly 25, 2025
• sitecore experience commerce, experience manager, experience platform +1 more +3 more Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip CVE-2025-34510 Public exploit EPSS 24.8% 8.8 HighJune 17, 2025
• sitecore experience manager, experience platform, experience commerce +1 more +3 more Sitecore XM and XP Hardcoded Credentials CVE-2025-34509 EPSS 55.9% 7.5 HighJune 17, 2025
• sitecore cms, cms and experience platform (xp) +1 more Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an... CVE-2019-9875 In KEV EPSS 25.4% 8.8 HighMay 31, 2019
• sitecore cms, cms and experience platform (xp), experience platform +2 more Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in... CVE-2019-9874 In KEV EPSS 83.7% 9.8 CriticalMay 31, 2019