CVE-2022-4979mediumCWE-79

CVE-2022-4979: falha de média gravidade em Sitecore Managed Cloud

Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Experience Platform+ Monitorar Managed Cloud

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.1epss 0.7%
A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who run the affected Sitecore Experience Platform / CMS versions are also affected.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Produtos afetados
Sitecore · Content Mangement System (CMS)Sitecore · Experience PlatformSitecore · Managed Cloud
CVEs relacionadas — Sitecore Managed Cloud

No mesmo produto, das mais perigosas para as menos.

CVE-2025-34509HIGHSitecore XM and XP Hardcoded CredentialsEPSS 55.9%CVE-2025-34510HIGHSitecore XM, XC, and XP Post-Auth RCE via Zip SlipEPSS 24.8%CVE-2025-34139HIGHSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadEPSS 0.5%