40 CVEs
4 in CISA KEV
Sitecore Vulnerabilities
CVE security advisories and vulnerability history for Sitecore.
40
Total CVEs
Published
4
In CISA KEV
Exploited in the wild
32
Public exploits
PoC or exploit code
7.5
CVE security advisories and vulnerability history for Sitecore.
Sitecore has 40 published CVE records since 2009, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 32 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.
A quick read on Sitecore's vulnerability posture, as a share of its 40 published CVEs.
across 40 scored CVEs
25 of 40 scored
4 of 40 CVEs
32 of 40 CVEs
15 of 40 CVEs
How the CVSS severity of Sitecore's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
4
4 of Sitecore's CVEs are confirmed exploited in the wild.
Public exploits
32
32 of Sitecore's CVEs have a known public exploit available.
The Sitecore products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.
The CWE weakness categories most often found in Sitecore CVEs. Follow any weakness for its full explanation.
The CVE Numbering Authorities that publish Sitecore CVE records.
How many Sitecore CVEs were published each year.
The most recently disclosed vulnerabilities affecting Sitecore.
CVE counts for other vendors.
Common questions about Sitecore vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new Sitecore CVE, with AI-written analysis and remediation steps.
Get an alert for each new Sitecore CVE, with AI-written analysis and remediation steps.
Monitor Sitecore CVEs