Sitecore
Sitecore known exploited vulnerabilities
Every Sitecore vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 1 of them are known to be used by ransomware.
4 CVEs
- CVE-2025-53690Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability · added September 4, 2025
- CVE-2019-9875Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability · added March 26, 2025
- CVE-2019-9874Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability · added March 26, 2025
- CVE-2021-42237 ransomwareSitecore XP Remote Command Execution Vulnerability · added March 25, 2022
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).