Sitecore Experience Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sitecore Experience Manager: 1 record(s), with affected versions and fixes.
cpe:2.3:a:sitecore:experience_manager

CVE-2025-53690 Critical · 9.0 KEV High · 66 Public exploit CWE-502 Sep 3, 2025

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.