Sitecore: exploited vulnerabilities
- 4exploited vulnerabilities
- 1used by ransomware
- Sep 4, 2025latest one added
- CMS and Experience Platform (XP) 2
- Multiple Products 1
- XP 1
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 4, 2025 | Deserialization of Untrusted Data | Multiple Products | Critical 9.0 | 61% |
| Mar 26, 2025 | Deserialization | CMS and Experience Platform (XP) | High 8.8 | 25% |
| Mar 26, 2025 | Deserialization | CMS and Experience Platform (XP) | Critical 9.8 | 84% |
| Mar 25, 2022 | Remote Command Execution | XP | Critical 9.8 | 98% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.