Exposure of Sitecore

CMS

54

exposure score

5,927

sites use

1

exploited

2

critical

CVEs

12 results

CVE-2025-53690CRITICALSitecore Products ViewState Deserialization VulnerabilityEPSS 60.7%KEV CVE-2025-34509HIGHSitecore XM and XP Hardcoded CredentialsEPSS 55.9%CVE-2025-34511HIGHSitecore PowerShell Extension RCE via Unrestricted UploadEPSS 30.4%CVE-2025-34510HIGHSitecore XM, XC, and XP Post-Auth RCE via Zip SlipEPSS 24.8%CVE-2025-53693CRITICALHTML Cache Poisoning through Unsafe ReflectionsEPSS 20.3%CVE-2025-53694HIGHInformation Disclosure in ItemServices APIEPSS 6.9%CVE-2025-53691HIGHSitecore Experience Remote Code Execution through Insecure DeserializationEPSS 1.6%CVE-2022-4979MEDIUMSitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSSEPSS 0.7%CVE-2015-10142MEDIUMSitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known PathEPSS 0.6%CVE-2025-34139HIGHSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadEPSS 0.5%CVE-2020-36850HIGHSitecore JSS React Sample Application 11.0.0 - 14.0.1 Information DisclosureEPSS 0.5%CVE-2025-53692HIGHSitecore Experience Platform Cross-Site Scripting VulnerabilityEPSS 0.4%