Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Sitecore Experience Manager ausnutzen, um beliebigen Programmcode auszuführen und um vertrauliche Informationen offenzulegen.
Product
Sitecore XM ist ein Content-Management-System. Es ist sowohl als On-Premise-Lösung als auch als Cloud-Angebot verfügbar.
Vulnerabilities 2
-
High 8.7
Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read
A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow an unauthenticated attacker to read arbitrary files. This vulnerability affects all Experience Platform topologi…
-
Unscored —CVE-2025-34138 Rejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority, as it is a duplicate of CVE-2025-53692 and C…
Revision history
-
#1
Initiale Fassung
References
-
NIST Vulnerability Database vom 2025-07-27
https://nvd.nist.gov/vuln/detail/CVE-2025-34138
-
NIST Vulnerability Database vom 2025-07-27
https://nvd.nist.gov/vuln/detail/CVE-2025-34139
-
EU Vulnerability Database vom 2025-07-27
https://euvd.enisa.europa.eu/enisa/EUVD-2025-22719
-
EU Vulnerability Database vom 2025-07-27
https://euvd.enisa.europa.eu/enisa/EUVD-2025-22720
-
Sitecore Security Bulletin vom 2025-07-27
https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003734