CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Sitecore Experience Manager and Experience Platform Remote Code Execution Vulnerability (CVE-2025-53690) Security Advisory
[Affected Scope] Sitecore Experience Manager (XM) and Experience Platform (XP) versions up to and including 9.0
[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the host system via deserialization of untrusted data
[Mitigation] Immediately apply the official security patches from the vendor, or implement temporary workarounds such as enforcing ViewState encryption and restricting access
ConnectWise ScreenConnect Remote Code Execution Vulnerability via ViewState Code Injection (CVE-2025-3935)
[Affected Scope] ConnectWise ScreenConnect versions 25.2.3 and earlier
[Impact] If machine keys are compromised by an attacker with privileged system-level access, they can inject a malicious ViewState to execute arbitrary code on the server
[Mitigation] Immediately upgrade to ScreenConnect 2025.4, which completely disables ViewState and removes its dependency
Microsoft SQL Server Reporting Services (SSRS) ViewState Deserialization Remote Code Execution Vulnerability (CVE-2020-0618) Analysis and Mitigation Guide
[Affected Scope] Microsoft SQL Server Reporting Services (SSRS) 2012, 2014, and 2016
[Impact] An authenticated attacker can execute arbitrary remote code under the context of the SSRS service account by sending a crafted HTTP POST request
[Mitigation] Immediately apply the official Microsoft security patches and restrict network access to the SSRS web portal