<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: sitecore-experience-platform-xp</title><description>Every new CVE for sitecore-experience-platform-xp.</description><link>https://agentprime.io/</link><item><title>CVE-2025-53692: Sitecore Experience Platform Cross-Site Scripting Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-53692/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53692/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 21 Sep 2025 19:42:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53690: Sitecore Products ViewState Deserialization Vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-53690/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53690/</guid><description>CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 4 Sept 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 0.61 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Sep 2025 20:04:48 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-53691: Sitecore Experience Remote Code Execution through Insecure Deserialization</title><link>https://agentprime.io/advisories/CVE-2025-53691/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53691/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Sep 2025 12:36:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53693: HTML Cache Poisoning through Unsafe Reflections</title><link>https://agentprime.io/advisories/CVE-2025-53693/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53693/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.20 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Sep 2025 12:36:53 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2025-53694: Information Disclosure in ItemServices API</title><link>https://agentprime.io/advisories/CVE-2025-53694/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53694/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Sep 2025 12:36:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2015-10142: Sitecore XP &lt; 8.0 and CMS &lt; 7.2 and &lt; 7.5 File Read via Known Path</title><link>https://agentprime.io/advisories/CVE-2015-10142/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2015-10142/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Jul 2025 15:55:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-34139: Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read</title><link>https://agentprime.io/advisories/CVE-2025-34139/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-34139/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Jul 2025 15:54:25 GMT</pubDate><category>CVE</category></item></channel></rss>