sitecore experience commerce Vulnerabilities
CVE security advisories and vulnerability history for experience commerce by sitecore.
CVE security advisories and vulnerability history for experience commerce by sitecore.
Last updated
sitecore experience commerce has 10 published CVE records since 2023, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 10 have a known public exploit. The average CVSS base score across scored CVEs is 8.6.
How the CVSS severity of sitecore experience commerce's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of sitecore experience commerce's CVEs is confirmed exploited in the wild.
Public exploits
10
10 of sitecore experience commerce's CVEs have a known public exploit available.
Browse every sitecore experience commerce version named in a CVE, then pick one to see only the CVEs that affect it.
10 CVEs
Added to CISA KEV 2025-09-04
The CWE weakness categories most often found in sitecore experience commerce CVEs. Follow any weakness for its full explanation.
How many sitecore experience commerce CVEs were published each year.
Browse vulnerabilities for other products by sitecore.
Common questions about sitecore experience commerce vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new sitecore experience commerce CVE, with AI-written analysis and remediation steps.