Vulnerability index

Browse CVEs

9 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Experience Platform HIGH 8.8
CVE-2023-33652

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /siteco…

No fix yet
Fix from $1,950 2023-06-06
Experience Platform HIGH 8.8
CVE-2023-33653

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the component /Applic…

No fix yet
Fix from $1,950 2023-06-06
Experience Platform CRITICAL 9.8
CVE-2021-42237 KEVEPSS 98%

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remot…

Mitigation only
Fix from $2,300 2021-11-05
Experience Platform MEDIUM 5.4
CVE-2019-13493

In Sitecore 9.0 rev 171002, Persistent XSS exists in the Media Library and File Manager. An authenticated unprivileged user can modify the uploaded f…

No fix yet
Fix from $1,600 2019-07-17
Sitecore.net HIGH 7.5
CVE-2018-7669EPSS 17%

An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory…

No fix yet
Fix from $1,950 2018-04-27
Cms MEDIUM 5.4
CVE-2017-11439

In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.

No fix yet
Fix from $1,600 2017-07-19
Sitecore.net MEDIUM 6.1
CVE-2017-9356

Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Results URI.

No fix yet
Fix from $1,600 2017-06-23
Crm MEDIUM 6.7
CVE-2017-5965

The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZIP archive…

No fix yet
Fix from $1,600 2017-05-23
Experience Platform MEDIUM 6.1
CVE-2016-8855

Cross-Site Scripting (XSS) in "/sitecore/client/Applications/List Manager/Taskpages/Contact list" in Sitecore Experience Platform 8.1 rev. 160519 (8.…

No fix yet
Fix from $1,600 2017-03-19