Vulnerabilities in Sitecore
12 resultsCVE-2025-34509HIGHSitecore XM and XP Hardcoded CredentialsEPSS 38.4%CVE-2025-53690CRITICALSitecore Products ViewState Deserialization VulnerabilityEPSS 26.3%KEVCVE-2025-53693CRITICALHTML Cache Poisoning through Unsafe ReflectionsEPSS 13.8%CVE-2025-34510HIGHSitecore XM, XC, and XP Post-Auth RCE via Zip SlipEPSS 9.3%CVE-2025-34511HIGHSitecore PowerShell Extension RCE via Unrestricted UploadEPSS 8.5%CVE-2025-53694HIGHInformation Disclosure in ItemServices APIEPSS 5.3%CVE-2025-53691HIGHSitecore Experience Remote Code Execution through Insecure DeserializationEPSS 1.4%CVE-2022-4979MEDIUMSitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSSEPSS 0.6%CVE-2015-10142MEDIUMSitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known PathEPSS 0.4%CVE-2025-34139HIGHSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadEPSS 0.4%CVE-2020-36850HIGHSitecore JSS React Sample Application 11.0.0 - 14.0.1 Information DisclosureEPSS 0.4%CVE-2025-53692HIGHSitecore Experience Platform Cross-Site Scripting VulnerabilityEPSS 0.4%