Sitecore

Records40All Threatist records

Exploited (KEV)4In CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Sitecore records in CISA KEV

TI-2025-33607 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability CRITICAL 98KEV 2025-09-04 TI-2019-07254 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CRITICAL 100KEV 2025-03-26 TI-2019-07255 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability CRITICAL 97KEV 2025-03-26 TI-2021-18687 Sitecore XP Remote Command Execution Vulnerability CRITICAL 100KEV 2022-03-25

Components

Products in the NVD configurations · select one to filter the records

Experience Platform 21 records CRITICAL Experience Manager 11 records CRITICAL Experience Commerce 10 records CRITICAL Managed Cloud 9 records CRITICAL Cms 8 records CRITICAL Crm 2 records LOW Sitecore.net 2 records MEDIUM Rocks 1 record MEDIUM

Records

2 records in Sitecore.net · all components

TI-2018-05528 CVE-2018-7669 · GHSA-64jx-9399-hqjr

An issue was discovered in Sitecore Sitecore.NET 8.1 rev.

MEDIUM 50

An issue was discovered in Sitecore Sitecore.NET 8.1 rev.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.16921 Published 2018-04-27 No fix listed CWE-22

TI-2017-06781 CVE-2017-9356 · GHSA-wxr5-7phr-782j

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr…

LOW 29

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00779 Published 2017-06-23 No fix listed CWE-79

Open these records in search →