Skip to contentSitecore vulnerabilities
Newest
- adobe experience managerAdobe Experience Manager Stored Cross-Site Scripting Could Lead to Arbitrary Code ExecutionCVE-2021-407115.4 Medium
- adobe experience managerAdobe Experience Manager Server-side Request Forgery could lead to Security feature bypassCVE-2021-286275.4 Medium
- adobe experience managerAdobe Experience Manager Cross-site Scripting vulnerability in inbox render.jspCVE-2021-286286.3 Medium
- adobe experience managerAdobe Experience Manager Cross-site Scripting vulnerability in inbox workitem.jspCVE-2021-286256.3 Medium
- adobe experience managerAdobe Experience Manager Improper Authorization at /content/usergeneratedCVE-2021-286263.7 Low
- sitecoreSitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload...CVE-2021-383668.8 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager stored cross-site scripting vulnerability in resource resolver factory could lead to arbitrary code executionCVE-2021-210847.3 High
- adobe experience manager, experience manager cloud service +1 moreAdobe Experience Manager broken access control in DSRPReindexServlet could lead to denial-of-serviceCVE-2021-210837.5 High
- adobe consulting services commons, experience manager +1 moreReflected Cross-site Scripting (XSS) on version-compare and page-compare toolsCVE-2021-21043Fix available6.1 Medium
- adobe experience manager, experience manager forms add-on +1 moreBlind SSRF in Forms add-on for AEMCVE-2020-244445.8 Medium
- adobe experience manager, experience manager cloud service +1 moreCross-site Scripting Vulnerability in Commenting Function of Adobe Experience Manager (AEM)CVE-2020-244459.0 Critical
- adobe experience managerHTML injection in AEM's content editor componentCVE-2020-97435.3 Medium
- adobe experience managerStored XSS in AEM Forms componentCVE-2020-97349.0 Critical
- adobe experience managerReflected XSS in AEM Inbox moduleCVE-2020-97429.0 Critical
- adobe experience managerStored XSS in AEM Forms ComponentsCVE-2020-97419.0 Critical
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97366.8 Medium
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97356.8 Medium
- adobe experience manager, experience manager forms +1 moreStored XSS in AEM Sites ComponentsCVE-2020-97329.0 Critical
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97386.8 Medium
- adobe experience managerStored XSS in AEM's Content Repository Development EnvironmentCVE-2020-97376.8 Medium
- adobe experience manager, experience manager forms +1 moreSensitive information disclosure possible in AEMCVE-2020-97337.5 High
- adobe experience managerStored XSS in AEM Design Importer ComponentCVE-2020-97409.0 Critical
- sitecore cmsMultiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow...CVE-2019-111986.1 Medium
- sitecore experience platformIn Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An...CVE-2019-13493Public exploit5.4 Medium
- sitecore experience platformSitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via...CVE-2019-11080Public exploitEPSS 13.9%8.8 High
- sitecore cms, cms and experience platform (xp) +1 moreDeserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an...CVE-2019-9875In KEVEPSS 25.4%8.8 High
- sitecore cms, cms and experience platform (xp), experience platform +2 moreDeserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in...CVE-2019-9874In KEVEPSS 83.7%9.8 Critical
- sitecore rocksThe Sitecore Rocks plugin before 2.1.149 for Sitecore allows an unauthenticated threat actor to...CVE-2019-124409.8 Critical
- microsoft powershell, powershell editor, powershell extension +1 more +3 moreA remote code execution vulnerability exists in PowerShell Editor Services, aka "PowerShell...CVE-2018-8327EPSS 23.1%9.8 Critical
- sitecore sitecore.netAn issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The ...CVE-2018-7669Public exploitEPSS 16.9%7.5 High
- adobe experience managerAdobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.CVE-2017-31107.5 High
- adobe experience managerAdobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.CVE-2017-31089.8 Critical
- adobe experience managerAdobe Experience Manager 6.3 and earlier has a misconfiguration vulnerability.CVE-2017-31077.5 High
- sitecore cmsIn Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi...CVE-2017-114404.9 Medium
- sitecore cmsIn Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.CVE-2017-114395.4 Medium
- sitecore sitecore.netSitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter...CVE-2017-93566.1 Medium
- sitecore crmSitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files...CVE-2017-59664.9 Medium
- sitecore crmThe package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to...CVE-2017-59656.7 Medium
- sitecore experience platformCross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list"...CVE-2016-8855Public exploit6.1 Medium
- sitecore cmsCross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows...CVE-2014-1000044.3 Medium
- sitecore staging moduleThe Staging Webservice ("sitecore modules/staging/service/api.asmx") in Sitecore Staging Module 5...CVE-2009-4367Public exploit6.8 Medium
- sitecore cmsCross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2...CVE-2009-2163Public exploit4.3 Medium
- sitecore cmsUnspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote...CVE-2009-10554.0 Medium