Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityVuln · CVE-2025-53690 · Sitecore · Multiple Products · CISA KEV · CVE.org · FIRST EPSS · SitecorePatch nowKEVEPSS 60.60%Sep 3, 2025
UnknownSitecore experience_commerce Unrestricted Upload of File with Dangerous TypeVuln · CVE-2025-34511 · Sitecore · Experience Manager (XM)/Experience Platform (XP) · CVE.org · FIRST EPSS · VulnCheck KEV · SitecorePatch nowKEVEPSS 29.81%Jun 22, 2025
UnknownSitecore experience_commerce Relative Path TraversalVuln · CVE-2025-34510 · Sitecore · Experience Manager (XM)/Experience Platform (XP)/Experience Commerce (XC) · CVE.org · FIRST EPSS · VulnCheck KEV · SitecorePatch nowKEVEPSS 24.30%Jun 22, 2025
UnknownSitecore experience_commerce Use of Hard-coded CredentialsVuln · CVE-2025-34509 · Sitecore · Experience Manager (XM)/Experience Platform (XP) · CVE.org · FIRST EPSS · VulnCheck KEV · SitecorePatch nowKEVEPSS 55.87%Jun 22, 2025
UnknownImproper Control of Generation of Code ('Code Injection')Vuln · CVE-2025-27218 · Sitecore · Experience Manager (XM) and Experience Platform (XP) · CVE.org · FIRST EPSS · VulnCheck KEV · SitecorePatch nowKEVEPSS 65.00%Mar 27, 2025