Product by Sitecore

    Sitecore CMS and Experience Platform (XP)

    8 known vulnerabilities in Sitecore CMS and Experience Platform (XP) (Sitecore), 2 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Sitecore CMS and Experience Platform (XP) (Sitecore)
    CriticalCVE-2019-9874

    Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2019-9875

    Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

    In CISA KEV

    		8.8
    MediumCVE-2017-11440

    Sitecore CMS and Experience Platform (XP): Path Traversal

    		4.9
    MediumCVE-2019-11198

    Sitecore CMS and Experience Platform (XP): Cross-Site Scripting (XSS)

    		6.1
    Not ratedCVE-2009-2163

    Sitecore CMS and Experience Platform (XP): Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2014-100004

    Sitecore CMS and Experience Platform (XP): Cross-Site Scripting (XSS)

    		—
    MediumCVE-2017-11439

    Sitecore CMS and Experience Platform (XP): Cross-Site Scripting (XSS)

    		5.4
    Not ratedCVE-2009-1055

    Sitecore CMS and Experience Platform (XP): security vulnerability

    		—

    All products by Sitecore