Sitecore experience commerce Vulnerabilities

CVE security advisories and vulnerability history for experience commerce by Sitecore.

Total CVEs

Published

In CISA KEV

Exploited in the wild

Public exploits

With known exploit

8.5

Avg CVSS

2023–2025

Last updated September 3, 2025

Overview

Sitecore experience commerce has 10 published CVE records since 2023, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 8.5.

Sitecore experience commerce Vulnerabilities: CVEs, CISA KEV & Security Advisories

Sitecore experience commerce Vulnerabilities

Overview

Sitecore experience commerce Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Fixed in

Common weakness types

Disclosure activity by year

Other Sitecore products

Frequently asked questions

How many CVEs does Sitecore experience commerce have?

How many Sitecore experience commerce CVEs are in CISA KEV?

Are there public exploits for Sitecore experience commerce vulnerabilities?

Which versions of Sitecore experience commerce are affected?

What are the most common weakness types in Sitecore experience commerce CVEs?

How many critical Sitecore experience commerce vulnerabilities are there?

What is the average severity of Sitecore experience commerce CVEs?

References

Track Sitecore experience commerce vulnerabilities