Vulnerabilities in Sitecore

12 results

Vexday analysis

Sitecore apresenta 12 vulnerabilidades conhecidas com apenas 1 sob ataque ativo, indicando risco moderado e contido. Duas críticas (CVSS alto) relacionadas principalmente a exposição de informação (CWE-200) demandam atenção, mas a ausência de publicações recentes sugere que o panorama de risco está estabilizado.

CVE-2025-34509HIGHSitecore XM and XP Hardcoded CredentialsEPSS 53.9%CVE-2025-53690CRITICALSitecore Products ViewState Deserialization VulnerabilityEPSS 31.4%KEV CVE-2025-34510HIGHSitecore XM, XC, and XP Post-Auth RCE via Zip SlipEPSS 15.8%CVE-2025-34511HIGHSitecore PowerShell Extension RCE via Unrestricted UploadEPSS 14.5%CVE-2025-53693CRITICALHTML Cache Poisoning through Unsafe ReflectionsEPSS 14.1%CVE-2025-53694HIGHInformation Disclosure in ItemServices APIEPSS 5.7%CVE-2025-53691HIGHSitecore Experience Remote Code Execution through Insecure DeserializationEPSS 1.5%CVE-2022-4979MEDIUMSitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSSEPSS 0.6%CVE-2015-10142MEDIUMSitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known PathEPSS 0.5%CVE-2025-34139HIGHSitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File ReadEPSS 0.5%CVE-2020-36850HIGHSitecore JSS React Sample Application 11.0.0 - 14.0.1 Information DisclosureEPSS 0.4%CVE-2025-53692HIGHSitecore Experience Platform Cross-Site Scripting VulnerabilityEPSS 0.4%