Browse CVEs

HIGH 8.8 CVE-2023-33652 Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /siteco… Experience Platform No fix yet Fix from $1,9502023-06-06 HIGH 8.8 CVE-2023-33653 Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /Applic… Experience Platform No fix yet Fix from $1,9502023-06-06 CRITICAL 9.8 CVE-2021-42237 KEVEPSS 98% Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remot… Experience Platform Mitigation only Fix from $2,3002021-11-05 MEDIUM 5.4 CVE-2019-13493 In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded f… Experience Platform No fix yet Fix from $1,6002019-07-17 HIGH 7.5 CVE-2018-7669EPSS 17% An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory… Sitecore.net No fix yet Fix from $1,9502018-04-27 MEDIUM 5.4 CVE-2017-11439 In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter. Cms No fix yet Fix from $1,6002017-07-19 MEDIUM 6.1 CVE-2017-9356 Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI. Sitecore.net No fix yet Fix from $1,6002017-06-23 MEDIUM 6.7 CVE-2017-5965 The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive… Crm No fix yet Fix from $1,6002017-05-23 MEDIUM 6.1 CVE-2016-8855 Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.… Experience Platform No fix yet Fix from $1,6002017-03-19