Login Request a demo
EP
Product
Experience Platform
by Sitecore · last CVE Sep 3, 2025
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 6High 12Medium 4Low 0
Severity
All severities22Critical6High12Medium4Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Experience Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-27066
6.5
1%
May 22
Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle
Affected: through 10.2
CVE-2016-8855
6.1
2%
Mar 19
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev
Affected: 8.1
CVE-2019-13493
5.4
2%
Jul 17
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager
Affected: 9.0
CVE-2022-4979
5.1
1%
Jul 25
Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
Affected: 7.5 Initial Release through 7.5 Update-2; 8.0 Initial Release through 8.0 Update-7; 8.1 Initial Release through 8.1 Update-3; 8.2 Initial Release through 8.2 Update-7; 9.0 Initial Release through 9.0 Update-2; 9.1 Initial Release through 9.1 Update 1; +5 more
Showing 4