Experience Commerce vulnerabilities | LiveThreat CVE Feed

Product

Experience Commerce

by Sitecore · last CVE Sep 3, 2025

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 3High 7Medium 0Low 0

Severity

All severities10 Critical3 High7 Medium0 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Experience Commerce to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-53690 In wildKEV	9.0	61%	Sep 3	Sitecore Products ViewState Deserialization Vulnerability Affected: through 9.0
CVE-2025-53693	9.8	20%	Sep 3	Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP)… Affected: 9.0 through 10.4
CVE-2023-35813	9.8	87%	Jun 17	Multiple Sitecore products allow remote code execution Affected: 8.2 through 10.3
CVE-2025-53691	8.8	2%	Sep 3	Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects… Affected: 9.0 through 10.4
CVE-2025-34511	8.8	30%	Jun 17	Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue Affected: 9.0 through 10.4
CVE-2025-34510	8.8	25%	Jun 17	Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability Affected: 9.0 through 10.4
CVE-2025-53694	7.5	7%	Sep 3	Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects… Affected: 9.2 through 10.4
CVE-2025-34509	7.5	56%	Jun 17	Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev Affected: 9.0 through 10.4
CVE-2024-46938	7.5	47%	Sep 15	An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release Affected: 8.0 through 10.4
CVE-2023-33651	7.5	1%	Jun 6	An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release… Affected: 9.0 through 10.3