Log in Start free

Sitecore

Products

ProductCVEsExploitedLatest
Experience Platform (XP)61Sep 21, 2025
Experience Manager (XM)31Sep 3, 2025
Sitecore Experience Manager (XM)3–Sep 21, 2025
Experience Platform3–Jul 25, 2025
Managed Cloud2–Jul 25, 2025
Experience Manager2–Jun 17, 2025
Experience Commerce1–Jun 17, 2025
Experience Commerce (XC)1–Jul 25, 2025
Powershell Extension1–Jun 17, 2025
JSS React Sample Application1–Jul 25, 2025
Content Mangement System (CMS)1–Jul 25, 2025

Exploited and recent CVEs

  • CVE-2025-53690 Critical 9.0 Exploited Sitecore Products ViewState Deserialization Vulnerability 60.7%
  • CVE-2025-53690 Critical 9.0 Exploited Sitecore Products ViewState Deserialization Vulnerability 60.7%
  • CVE-2025-53692 High 7.1 Sitecore Experience Platform Cross-Site Scripting Vulnerability 0.4%
  • CVE-2025-53692 High 7.1 Sitecore Experience Platform Cross-Site Scripting Vulnerability 0.4%
  • CVE-2025-53691 High 8.8 Sitecore Experience Remote Code Execution through Insecure Deserialization 1.6%
  • CVE-2025-53691 High 8.8 Sitecore Experience Remote Code Execution through Insecure Deserialization 1.6%
  • CVE-2025-53693 Critical 9.8 HTML Cache Poisoning through Unsafe Reflections 20.3%
  • CVE-2025-53693 Critical 9.8 HTML Cache Poisoning through Unsafe Reflections 20.3%
  • CVE-2025-53694 High 7.5 Information Disclosure in ItemServices API 6.9%
  • CVE-2025-53694 High 7.5 Information Disclosure in ItemServices API 6.9%
  • CVE-2022-4979 Medium 5.1 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS 0.7%
  • CVE-2022-4979 Medium 5.1 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS 0.7%
  • CVE-2022-4979 Medium 5.1 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS 0.7%
  • CVE-2025-34139 High 8.7 Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read 0.5%
  • CVE-2025-34139 High 8.7 Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read 0.5%
  • CVE-2025-34139 High 8.7 Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read 0.5%
  • CVE-2025-34139 High 8.7 Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read 0.5%
  • CVE-2020-36850 High 8.7 Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure 0.5%
  • CVE-2025-34511 High 8.8 Sitecore PowerShell Extension RCE via Unrestricted Upload 30.4%
  • CVE-2025-34510 High 8.8 Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip 24.8%
  • CVE-2025-34510 High 8.8 Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip 24.8%
  • CVE-2025-34510 High 8.8 Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip 24.8%
  • CVE-2025-34509 High 7.5 Sitecore XM and XP Hardcoded Credentials 55.9%
  • CVE-2025-34509 High 7.5 Sitecore XM and XP Hardcoded Credentials 55.9%