Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vendor

Sitecore

4 known exploited

Sitecore news

No recent coverage.

Actively exploited

All 4 →
CVE-2025-53690CVSS 9.0

Sitecore Multiple Products

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Added Sep 4, 2025Fed. due Sep 25, 2025
CVE-2019-9874CVSS 9.8

Sitecore CMS and Experience Platform (XP)

Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

Added Mar 26, 2025Fed. due Apr 16, 2025
CVE-2019-9875CVSS 8.8

Sitecore CMS and Experience Platform (XP)

Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

Added Mar 26, 2025Fed. due Apr 16, 2025
CVE-2021-42237RansomwareCVSS 9.8

Sitecore XP

Sitecore XP Remote Command Execution Vulnerability

Added Mar 25, 2022Fed. due Apr 15, 2022

Products

CMS and Experience Platform (XP) · 2 KEVMultiple Products · 1 KEVXP · 1 KEV