Skip to contentSitecore Experience Platform (xp) vulnerabilities
- sitecore experience platform (xp), experience manager (xm) +1 moreSitecore Experience Platform Cross-Site Scripting VulnerabilityCVE-2025-536927.1 High
- sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 moreSitecore Products ViewState Deserialization VulnerabilityCVE-2025-53690In KEVPublic exploitEPSS 60.7%9.0 Critical
- sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 moreSitecore Experience Remote Code Execution through Insecure DeserializationCVE-2025-53691Public exploit8.8 High
- sitecore experience platform (xp), experience manager, experience platform +3 more +5 moreHTML Cache Poisoning through Unsafe ReflectionsCVE-2025-53693Public exploitEPSS 20.3%9.8 Critical
- sitecore experience platform (xp), experience manager, experience platform +3 more +5 moreInformation Disclosure in ItemServices APICVE-2025-53694Public exploit7.5 High
- global interactive design media software inc. content management system (cms), sitecore experience platform (xp) +1 moreSitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known PathCVE-2015-101426.9 Medium
- sitecore experience commerce (xc), experience manager (xm), experience platform (xp) +1 more +3 moreSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadCVE-2025-341398.7 High
- sitecore cms, cms and experience platform (xp) +1 moreDeserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an...CVE-2019-9875In KEVEPSS 25.4%8.8 High
- sitecore cms, cms and experience platform (xp), experience platform +2 moreDeserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in...CVE-2019-9874In KEVEPSS 83.7%9.8 Critical