Skip to content
OpenAdvisories

Product · Sitecore

Sitecore Experience Manager (XM)

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-53693 Public exploit EPSS 20%

    HTML Cache Poisoning through Unsafe Reflections

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9…

    Sitecore Experience Platform (XP) Sitecore Experience Manager (XM)
  • High 7.5
    CVE-2025-53694 Public exploit

    Information Disclosure in ItemServices API

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (XP): from…

    Sitecore Experience Platform (XP) Sitecore Experience Manager (XM)