Skip to content
OpenAdvisories

Vendor

Sitecore

12 known vulnerabilities.

Products

Experience Platform (XP) 7 Experience Manager (XM) 3 Experience Platform 3 Sitecore Experience Manager (XM) 3 Experience Manager 2 Managed Cloud 2 Content Management System (CMS) 1 Experience Commerce 1 Content Mangement System (CMS) 1 Experience Commerce (XC) 1 Powershell Extension 1 JSS React Sample Application 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2022-4979

    Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS

    A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who ru…

    Sitecore Experience Platform Managed Cloud Content Mangement System (CMS)
  • Medium 6.9
    CVE-2015-10142

    Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

    Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev. 141212) and Content Management System (CMS) prior to 7.2 Update-3 (rev. 141226) and prior to 7.5 Update-1 (rev. 150130) contain a vulnerability that may allow an attacker to download files u…

    Sitecore Experience Platform (XP) Content Management System (CMS)