Skip to content
OpenAdvisories

Product · Sitecore

Experience Platform (XP)

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-53690 Exploited Public exploit EPSS 61%

    Sitecore Products ViewState Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.

    Sitecore Experience Platform (XP) Experience Manager (XM)
    KEV Sep 4, 2025
  • Critical 9.8
    CVE-2025-53693 Public exploit EPSS 20%

    HTML Cache Poisoning through Unsafe Reflections

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9…

    Sitecore Experience Platform (XP) Sitecore Experience Manager (XM)