EP
Product
Experience Platform
by Sitecore · last CVE Sep 3, 2025
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 12Medium 3Low 0
Watch

Add Experience Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-42237
RansomwareIn wildKEV
9.8
98%
Nov 5
Sitecore XP Remote Command Execution Vulnerability
Affected: 7.5; 7.5; 7.5; 8.0; 8.0; 8.0; +18 more
CVE-2019-9874
In wildKEV
9.8
84%
May 31
Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
Affected: 7.5 through 8.2
CVE-2025-53690
In wildKEV
9.0
61%
Sep 3
Sitecore Products ViewState Deserialization Vulnerability
Affected: through 9.0
Showing 3