EM
Product
Experience Manager
by Sitecore · last CVE Sep 3, 2025
On CISA KEVExploited in the wild
11
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 8Medium 0Low 0
Watch

Add Experience Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53690
In wildKEV
9.0
61%
Sep 3
Sitecore Products ViewState Deserialization Vulnerability
Affected: through 9.0
CVE-2025-53693
9.8
20%
Sep 3
HTML Cache Poisoning through Unsafe Reflections
Affected: 9.0 through 10.4
CVE-2023-35813
9.8
87%
Jun 17
Multiple Sitecore products allow remote code execution
Affected: 8.2 through 10.3
Showing 3