Sitecore Experience Manager vulnerabilities

• sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more Sitecore Products ViewState Deserialization Vulnerability CVE-2025-53690 In KEVPublic exploit EPSS 60.7% 9.0 CriticalSeptember 3, 2025
• sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 more Sitecore Experience Remote Code Execution through Insecure Deserialization CVE-2025-53691 Public exploit 8.8 HighSeptember 3, 2025
• sitecore experience platform (xp), experience manager, experience platform +3 more +5 more HTML Cache Poisoning through Unsafe Reflections CVE-2025-53693 Public exploit EPSS 20.3% 9.8 CriticalSeptember 3, 2025
• sitecore experience platform (xp), experience manager, experience platform +3 more +5 more Information Disclosure in ItemServices API CVE-2025-53694 Public exploit 7.5 HighSeptember 3, 2025
• sitecore experience manager, experience platform, powershell extension +2 more +4 more Sitecore PowerShell Extension RCE via Unrestricted Upload CVE-2025-34511 Public exploit EPSS 30.4% 8.8 HighJune 17, 2025
• sitecore experience commerce, experience manager, experience platform +1 more +3 more Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip CVE-2025-34510 Public exploit EPSS 24.8% 8.8 HighJune 17, 2025
• sitecore experience manager, experience platform, experience commerce +1 more +3 more Sitecore XM and XP Hardcoded Credentials CVE-2025-34509 EPSS 55.9% 7.5 HighJune 17, 2025
• sitecore experience commerce, experience manager, experience platform +2 more An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and... CVE-2024-46938 EPSS 46.8% 7.5 HighSeptember 15, 2024
• sitecore experience commerce, experience manager, experience platform +1 more +3 more Multiple Sitecore products allow remote code execution. This affects Experience Manager,... CVE-2023-35813 Public exploit EPSS 86.7% 9.8 CriticalJune 17, 2023
• sitecore experience commerce, experience manager, experience platform +1 more +3 more An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM... CVE-2023-33651 7.5 HighJune 6, 2023
• sitecore experience manager, experience platform +1 more An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted... CVE-2023-26262 Public exploit 7.2 HighMarch 14, 2023