Sitecore
4 CVEs in CISA KEV — 1 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2025-53690 |
Multiple Products | — | 0.6060 | 2025-09-04 | 2025-09-25 | Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce | |
CVE-2019-9875 |
CMS and Experience Platform (XP) | — | — | 2025-03-26 | 2025-04-16 | Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerabilit | |
CVE-2019-9874 |
CMS and Experience Platform (XP) | — | — | 2025-03-26 | 2025-04-16 | Sitecore CMS and Experience Platform (XP) contain a deserialization vulnerabilit | |
CVE-2021-42237 |
XP | — | — | 2022-03-25 | 2022-04-15 | RW | Sitcore XP contains an insecure deserialization vulnerability which can allow fo |