Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 60.60%Sep 3, 2025
- High8.8Sitecore experience_commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 29.81%Jun 17, 2025
- High8.8Sitecore experience_commerce Relative Path TraversalPatch nowKEVEPSS 24.30%Jun 17, 2025
- High7.5Sitecore experience_commerce Use of Hard-coded CredentialsPatch nowKEVEPSS 55.87%Jun 17, 2025
- UnknownSitecore Experience Platform , Manager, and Commerce Unauthenticated Arbitrary File ReadPatch nowKEVEPSS 46.77%Jun 7, 2025
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 65.00%Mar 27, 2025
- UnknownExperience Manager, Experience Platform, and Experience Commerce Remote Code ExecutionPatch nowKEVEPSS 86.69%Jan 22, 2024
- Critical9.8Sitecore XP Remote Command Execution VulnerabilityPatch nowKEVEPSS 97.57%Nov 5, 2021
- High8.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityPatch nowKEVEPSS 13.79%May 31, 2019
- Critical9.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityPatch nowKEVEPSS 83.74%May 31, 2019
10 records · page 1 of 1
PreviousNext