Advisories · Technology

Sitecore Experience Platform.

Every CVE that names Sitecore Experience Platform among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-4979 CVE record

CVSS 5.1 Medium

Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
- Sitecore Experience Platform
- Sitecore Content Mangement System (CMS)
- Cross-site scripting (XSS)
Not analysed yet 25 Jul 2025
CVE-2025-34510 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip
- Sitecore Experience Manager
- Sitecore Experience Platform
- Path traversal
Not analysed yet 17 Jun 2025
CVE-2025-34509 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

Sitecore XM and XP Hardcoded Credentials
- Sitecore Experience Manager
- Sitecore Experience Platform
- Hard-coded credentials
Not analysed yet 17 Jun 2025