Skip to content
OpenAdvisories

Vendor

Sitecore

12 known vulnerabilities.

Products

Experience Platform (XP) 7 Experience Manager (XM) 3 Experience Platform 3 Sitecore Experience Manager (XM) 3 Experience Manager 2 Managed Cloud 2 Content Management System (CMS) 1 Experience Commerce 1 Content Mangement System (CMS) 1 Experience Commerce (XC) 1 Powershell Extension 1 JSS React Sample Application 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2025-53690 Exploited Public exploit EPSS 61%

    Sitecore Products ViewState Deserialization Vulnerability

    Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.

    Sitecore Experience Platform (XP) Experience Manager (XM)
    KEV Sep 4, 2025