Managed Cloud vulnerabilities | LiveThreat CVE Feed

Product

Managed Cloud

by Sitecore · last CVE Sep 3, 2025

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 3High 7Medium 1Low 0

Severity

All severities11 Critical3 High7 Medium1 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Managed Cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-53690 In wildKEV	9.0	61%	Sep 3	Sitecore Products ViewState Deserialization Vulnerability Affected: All versions, or not specified
CVE-2025-53693	9.8	20%	Sep 3	HTML Cache Poisoning through Unsafe Reflections Affected: All versions, or not specified
CVE-2023-35813	9.8	87%	Jun 17	Multiple Sitecore products allow remote code execution Affected: 8.2 through 10.3
CVE-2025-53691	8.8	2%	Sep 3	Sitecore Experience Remote Code Execution through Insecure Deserialization Affected: All versions, or not specified
CVE-2025-34511	8.8	30%	Jun 17	Sitecore PowerShell Extension RCE via Unrestricted Upload Affected: All versions, or not specified
CVE-2025-34510	8.8	25%	Jun 17	Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip Affected: All versions, or not specified
CVE-2025-34139	8.7	1%	Jul 25	Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read Affected: 8.0 Initial Release through 10.4 Initial Release and later
CVE-2025-53694	7.5	7%	Sep 3	Information Disclosure in ItemServices API Affected: All versions, or not specified
CVE-2025-34509	7.5	56%	Jun 17	Sitecore XM and XP Hardcoded Credentials Affected: All versions, or not specified
CVE-2023-33651	7.5	1%	Jun 6	An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release… Affected: All versions, or not specified
CVE-2022-4979	5.1	1%	Jul 25	Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS Affected: All versions, or not specified