Sitecore
4 vulnerabilities in Sitecore products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2025-53690 | Sitecore | Multiple Products | Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability | 4 Sep 2025 | 25 Sep 2025 | Unknown |
| CVE-2019-9874 | Sitecore | CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 26 Mar 2025 | 16 Apr 2025 | Unknown |
| CVE-2019-9875 | Sitecore | CMS and Experience Platform (XP) | Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability | 26 Mar 2025 | 16 Apr 2025 | Unknown |
| CVE-2021-42237 | Sitecore | XP | Sitecore XP Remote Command Execution Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Known |