Sitecore Experience Commerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sitecore Experience Commerce: 1 record(s), with affected versions and fixes.
cpe:2.3:a:sitecore:experience_commerce

CVE-2025-53690 Critical · 9.0 KEV High · 66 Public exploit CWE-502 Sep 3, 2025

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.