Skip to content
Sitecore Managed Cloud vulnerabilities
-
sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more
Sitecore Products ViewState Deserialization Vulnerability
CVE-2025-53690
In KEVPublic exploit
EPSS 60.7%
9.0 Critical
-
sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 more
Sitecore Experience Remote Code Execution through Insecure Deserialization
CVE-2025-53691
Public exploit
8.8 High
-
sitecore experience platform (xp), experience manager, experience platform +3 more +5 more
HTML Cache Poisoning through Unsafe Reflections
CVE-2025-53693
Public exploit
EPSS 20.3%
9.8 Critical
-
sitecore experience platform (xp), experience manager, experience platform +3 more +5 more
Information Disclosure in ItemServices API
CVE-2025-53694
Public exploit
7.5 High
-
sitecore experience manager, experience platform, powershell extension +2 more +4 more
Sitecore PowerShell Extension RCE via Unrestricted Upload
CVE-2025-34511
Public exploit
EPSS 30.4%
8.8 High
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip
CVE-2025-34510
Public exploit
EPSS 24.8%
8.8 High
-
sitecore experience manager, experience platform, experience commerce +1 more +3 more
Sitecore XM and XP Hardcoded Credentials
CVE-2025-34509
EPSS 55.9%
7.5 High
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
Multiple Sitecore products allow remote code execution. This affects Experience Manager,...
CVE-2023-35813
Public exploit
EPSS 86.7%
9.8 Critical
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM...
CVE-2023-33651
7.5 High