Managed Cloud (Sitecore) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-09-03. Vendor: Sitecore.
CVEs of Managed Cloud
- CVE-2025-53690 - CVSS 9 (critical), 2025-09-03: Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue…
- CVE-2025-53693 - CVSS 9.8 (critical), 2025-09-03: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore…
- CVE-2025-53691 - CVSS 8.8 (high), 2025-09-03: Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This…
- CVE-2025-53694 - CVSS 7.5 (high), 2025-09-03: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This…
- CVE-2025-34139 - CVSS 8.7 (high), 2025-07-25: A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow an…
- CVE-2022-4979 - CVSS 5.1 (medium), 2025-07-25: A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated…
- CVE-2025-34509 - CVSS 7.5 (high), 2025-06-17: Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE,…
- CVE-2025-34511 - CVSS 8.8 (high), 2025-06-17: Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an…
- CVE-2025-34510 - CVSS 8.8 (high), 2025-06-17: Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip…
- CVE-2023-35813 - CVSS 9.8 (critical), 2023-06-17: Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
- CVE-2023-33651 - CVSS 7.5 (high), 2023-06-06: An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0…
