Product by Sitecore
Experience Platform (xp)
7 known vulnerabilities in Experience Platform (xp) (Sitecore), 1 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-53690 | Sitecore Products ViewState Deserialization Vulnerability In CISA KEValso in 5 other products | 9.0 | |
| Critical | CVE-2025-53693 | HTML Cache Poisoning through Unsafe Reflections | 9.8 | |
| High | CVE-2025-53694 | Information Disclosure in ItemServices API | 7.5 | |
| High | CVE-2025-53691 | Sitecore Experience Remote Code Execution through Insecure Deserialization | 8.8 | |
| High | CVE-2025-34139 | Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read | — | |
| Medium | CVE-2015-10142 | Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path | — | |
| High | CVE-2025-53692 | Sitecore Experience Platform Cross-Site Scripting Vulnerability | 7.1 |