Advisories · Technology

Sitecore Managed Cloud.

Every CVE that names Sitecore Managed Cloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-4979 CVE record

CVSS 5.1 Medium

Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
- Sitecore Experience Platform
- Sitecore Content Mangement System (CMS)
- Cross-site scripting (XSS)
Not analysed yet 25 Jul 2025
CVE-2025-34139 CVE record

CVSS 8.7 High

Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read
- Sitecore Experience Manager (XM)
- Sitecore Experience Platform (XP)
- Hard-coded credentials
- Information disclosure
Not analysed yet 25 Jul 2025