CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-03
Sitecore Experience Manager and Experience Platform Remote Code Execution Vulnerability (CVE-2025-53690) Security Advisory
[Affected Scope] Sitecore Experience Manager (XM) and Experience Platform (XP) versions up to and including 9.0
[Impact] Unauthenticated remote attackers can execute arbitrary code and fully compromise the host system via deserialization of untrusted data
[Mitigation] Immediately apply the official security patches from the vendor, or implement temporary workarounds such as enforcing ViewState encryption and restricting access