Skip to content
OpenAdvisories

Product · Sitecore

Experience Platform

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-34510 Public exploit EPSS 25%

    Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip

    Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP…

    Sitecore Experience Platform Experience Manager Experience Commerce
  • High 7.5
    CVE-2025-34509 Scanner template EPSS 56%

    Sitecore XM and XP Hardcoded Credentials

    Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attack…

    Sitecore Experience Platform Experience Manager