Vendor
Sitecore vulnerabilities under active attack
4 Sitecore vulnerabilities have confirmed evidence of exploitation in the wild, and 1 is used in ransomware campaigns.
4
confirmed exploited
1
used in ransomware
4
past fix deadline
- CVE-2025-53690 Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability Sitecore · Multiple Products
- CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability Sitecore · CMS and Experience Platform (XP)
- CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability Sitecore · XP