EP
Product
Experience Platform
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 12Medium 3Low 0
Watch
Add Experience Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42237 RansomwareIn wildKEV | 9.8 | Nov 5 | Sitecore XP Remote Command Execution Vulnerability Affected: 7.5; 7.5; 7.5; 8.0; 8.0; 8.0; +18 more |
| CVE-2019-9874 In wildKEV | 9.8 | May 31 | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Affected: 7.5 through 8.2 |
| CVE-2025-53690 In wildKEV | 9.0 | Sep 3 | Sitecore Products ViewState Deserialization Vulnerability Affected: through 9.0 |
| CVE-2025-53693 | 9.8 | Sep 3 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP)… Affected: 9.0 before 10.4; 10.4 |
| CVE-2023-35813 | 9.8 | Jun 17 | Multiple Sitecore products allow remote code execution Affected: 8.2 through 10.3 |
| CVE-2023-27068 | 9.8 | May 23 | Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary code via ValidationResult.aspx Affected: before 10.2 |
Showing 6