Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityCVE-2025-53690 · sitecore · experience commerce · CISA KEV · CVE.org · FIRST EPSS · SitecoreKEVEPSS 60.6%Sep 3, 2025
Critical9.8Sitecore XP Remote Command Execution VulnerabilityCVE-2021-42237 · sitecore · experience platform · CISA KEV · CVE.org · FIRST EPSS · SitecoreKEVEPSS 97.6%Nov 5, 2021
High8.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityCVE-2019-9875 · sitecore · cms · CISA KEV · CVE.org · FIRST EPSS · SitecoreKEVEPSS 13.8%May 31, 2019
Critical9.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityCVE-2019-9874 · sitecore · cms · CISA KEV · CVE.org · FIRST EPSS · SitecoreKEVEPSS 83.7%May 31, 2019