Login Request a demo
CM
Product
Cms
by Sitecore · last CVE Aug 5, 2019
On CISA KEVExploited in the wild
8
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 1Medium 3Low 0
Severity
All severities8Critical1High1Medium3Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-11198
6.1
1%
Aug 5
Multiple cross-site scripting (XSS) vulnerabilities in Sitecore CMS 9.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) #300583 - List…
Affected: through 9.0.1
CVE-2017-11439
5.4
1%
Jul 19
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter
Affected: 8.2
CVE-2017-11440
4.9
2%
Jul 19
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter
Affected: 8.2
Showing 3