EM
Product
Experience Manager (XM)
On CISA KEVExploited in the wild
3
CVEs
1
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Experience Manager (XM) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-53691 | 8.8 | Sep 3 | Sitecore Experience Remote Code Execution through Insecure Deserialization Affected: 9.0 through 9.3; 10.0 through 10.4 |
| CVE-2025-34139 | 8.7 | Jul 25 | Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read Affected: 8.0 Initial Release through 10.4 Initial Release and later |
Showing 2