Skip to content
Sitecore Xp vulnerabilities
-
sitecore experience platform (xp), experience manager (xm) +1 more
Sitecore Experience Platform Cross-Site Scripting Vulnerability
CVE-2025-53692
7.1 High
-
sitecore experience manager (xm), experience platform (xp), experience manager +4 more +6 more
Sitecore Products ViewState Deserialization Vulnerability
CVE-2025-53690
In KEVPublic exploit
EPSS 60.7%
9.0 Critical
-
sitecore experience manager (xm), experience platform (xp), experience manager +3 more +5 more
Sitecore Experience Remote Code Execution through Insecure Deserialization
CVE-2025-53691
Public exploit
8.8 High
-
sitecore experience platform (xp), experience manager, experience platform +3 more +5 more
HTML Cache Poisoning through Unsafe Reflections
CVE-2025-53693
Public exploit
EPSS 20.3%
9.8 Critical
-
sitecore experience platform (xp), experience manager, experience platform +3 more +5 more
Information Disclosure in ItemServices API
CVE-2025-53694
Public exploit
7.5 High
-
sitecore experience platform, managed cloud, content mangement system (cms) +2 more
Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
CVE-2022-4979
5.1 Medium
-
global interactive design media software inc. content management system (cms), sitecore experience platform (xp) +1 more
Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path
CVE-2015-10142
6.9 Medium
-
sitecore experience commerce (xc), experience manager (xm), experience platform (xp) +1 more +3 more
Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read
CVE-2025-34139
8.7 High
-
sitecore experience manager, experience platform, powershell extension +2 more +4 more
Sitecore PowerShell Extension RCE via Unrestricted Upload
CVE-2025-34511
Public exploit
EPSS 30.4%
8.8 High
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip
CVE-2025-34510
Public exploit
EPSS 24.8%
8.8 High
-
sitecore experience manager, experience platform, experience commerce +1 more +3 more
Sitecore XM and XP Hardcoded Credentials
CVE-2025-34509
EPSS 55.9%
7.5 High
-
sitecore experience commerce, experience manager, experience platform +2 more
An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and...
CVE-2024-46938
EPSS 46.8%
7.5 High
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
Multiple Sitecore products allow remote code execution. This affects Experience Manager,...
CVE-2023-35813
Public exploit
EPSS 86.7%
9.8 Critical
-
adobe experience manager, experience manager cloud service +1 more
Open Redirect on AEM Target
CVE-2023-29307
5.4 Medium
-
sitecore experience platform
Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code...
CVE-2023-33653
8.8 High
-
sitecore experience platform
Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code...
CVE-2023-33652
8.8 High
-
sitecore experience commerce, experience manager, experience platform +1 more +3 more
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM...
CVE-2023-33651
7.5 High
-
sitecore experience platform
Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote...
CVE-2023-27068
9.8 Critical
-
sitecore experience platform
Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote...
CVE-2023-27067
7.5 High
-
sitecore experience platform
Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows...
CVE-2023-27066
6.5 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Weak Cryptography for Passwords Security feature bypass
CVE-2023-22271
5.3 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22269
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22266
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22265
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22264
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22263
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22262
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22261
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22260
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22259
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22258
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22257
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2023-22256
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22254
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22253
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2023-22252
5.4 Medium
-
sitecore experience manager, experience platform +1 more
An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted...
CVE-2023-26262
Public exploit
7.2 High
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44510
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM URL Redirection to Untrusted Site Security feature bypass
CVE-2022-44488
3.5 Low
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44474
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44471
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44470
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44467
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44466
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44465
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-44463
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42365
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42364
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42362
5.4 Medium
-
adobe experience manager, experience manager cloud service +1 more
AEM Reflected XSS Arbitrary code execution
CVE-2022-42357
5.4 Medium
- Show olderLoading…