40 CVEs
4 in CISA KEV
sitecore Vulnerabilities
CVE security advisories and vulnerability history for sitecore.
40
Total CVEs
Published
4
In CISA KEV
Exploited in the wild
25
Public exploits
With known exploit
8.2
Avg CVSS
2009–2025
Overview
sitecore has 40 published CVE records since 2009, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 25 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting sitecore products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.