Login Request a demo
CM
Product
Cms
by Sitecore · last CVE Aug 5, 2019
On CISA KEVExploited in the wild
8
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities8Critical1High1Medium3Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-9874
In wildKEV
9.8
84%
May 31
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Affected: 7.0 through 7.2
CVE-2019-9875
In wildKEV
8.8
25%
May 31
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Affected: through 9.1
CVE-2019-11198
6.1
1%
Aug 5
Multiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) #300583 - List…
Affected: through 9.0.1
CVE-2017-11439
5.4
1%
Jul 19
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter
Affected: 8.2
CVE-2017-11440
4.9
2%
Jul 19
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter
Affected: 8.2
CVE-2014-100004
–
2%
Jan 13
Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev
Affected: through 7.0
CVE-2009-2163
–
3%
Jun 22
Cross-site scripting (XSS) vulnerability in login/default.aspx in Sitecore CMS before 6.0.2 Update-1 090507 allows remote attackers to inject arbitrary web script or HTML via the…
Affected: through 6.0.2; 5.3.0; 5.3.1; 6.0.1
CVE-2009-1055
–
1%
Mar 24
Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev
Affected: 5.3.0; 5.3.1
Showing 8