EP
Product
Experience Platform (XP)
by Sitecore · last CVE Sep 21, 2025
On CISA KEVExploited in the wild
2
CVEs
1
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add Experience Platform (XP) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-53690
In wildKEV
9.0
61%
Sep 3
Sitecore Products ViewState Deserialization Vulnerability
Affected: through 9.0
CVE-2025-53692
7.1
0%
Sep 21
Sitecore Experience Platform Cross-Site Scripting Vulnerability
Affected: 9.2 through 10.4
Showing 2