Product by Sitecore

    Experience Manager (xm)

    3 known vulnerabilities in Experience Manager (xm) (Sitecore), 1 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Experience Manager (xm) (Sitecore)
    CriticalCVE-2025-53690

    Sitecore Products ViewState Deserialization Vulnerability

    In CISA KEValso in 5 other products

    		9.0
    HighCVE-2025-53691

    Sitecore Experience Remote Code Execution through Insecure Deserialization

    also in 5 other products

    		8.8
    HighCVE-2025-34139

    Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read

    also in 2 other products

    		—

    All products by Sitecore