EP
Product
Experience Platform (XP)
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Experience Platform (XP) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-53690 In wildKEV | 9.0 | Sep 3 | Sitecore Products ViewState Deserialization Vulnerability Affected: through 9.0 |
| CVE-2025-53693 | 9.8 | Sep 3 | HTML Cache Poisoning through Unsafe Reflections Affected: 9.0 through 9.3; 10.0 through 10.4 |
| CVE-2025-53691 | 8.8 | Sep 3 | Sitecore Experience Remote Code Execution through Insecure Deserialization Affected: 9.0 through 9.3; 10.0 through 10.4 |
| CVE-2025-34139 | 8.7 | Jul 25 | Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read Affected: 8.0 Initial Release through 10.4 Initial Release and later |
| CVE-2025-53694 | 7.5 | Sep 3 | Information Disclosure in ItemServices API Affected: 9.2 through 10.4 |
| CVE-2025-53692 | 7.1 | Sep 21 | Sitecore Experience Platform Cross-Site Scripting Vulnerability Affected: 9.2 through 10.4 |
| CVE-2015-10142 | 6.9 | Jul 25 | Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path Affected: before 8.0 Initial Release (rev. 141212) |
Showing 7