Sitecore: known exploited vulnerabilities
4Catalog entries
1Ransomware use
2025-09-04Last added
2025-09-25Latest due date
Get an email when Sitecore is next added.Watch Sitecore
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2025-53690 | Multiple Products Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability |
2025-09-25 |
| CVE-2019-9874 | CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability |
2025-04-16 |
| CVE-2019-9875 | CMS and Experience Platform (XP) Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability |
2025-04-16 |
| CVE-2021-42237 | XP RANSOMWARE Sitecore XP Remote Command Execution Vulnerability |
2022-04-15 |