Login Request a demo
EP
Product
Experience Platform
by Sitecore · last CVE Sep 3, 2025
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 6High 12Medium 3Low 0
Severity
All severities21Critical6High12Medium3Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Experience Platform to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-27066
6.5
1%
May 22
Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attackers to download arbitrary files via Urlhandle
Affected: through 10.2
CVE-2016-8855
6.1
2%
Mar 19
Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev
Affected: 8.1
CVE-2019-13493
5.4
2%
Jul 17
In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager
Affected: 9.0
Showing 3