9 CVEs
1 in CISA KEV
sitecore Experience Platform (XP) Vulnerabilities
CVE security advisories and vulnerability history for Experience Platform (XP) by sitecore.
9
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
5
Public exploits
CVE security advisories and vulnerability history for Experience Platform (XP) by sitecore.
Last updated
sitecore Experience Platform (XP) has 9 published CVE records since 2025, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.9.
How the CVSS severity of sitecore Experience Platform (XP)'s CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of sitecore Experience Platform (XP)'s CVEs is confirmed exploited in the wild.
Public exploits
5
5 of sitecore Experience Platform (XP)'s CVEs have a known public exploit available.
Browse every sitecore Experience Platform (XP) version named in a CVE, then pick one to see only the CVEs that affect it.
9 CVEs
Added to CISA KEV 2025-09-04
The CWE weakness categories most often found in sitecore Experience Platform (XP) CVEs. Follow any weakness for its full explanation.
Browse vulnerabilities for other products by sitecore.
Common questions about sitecore Experience Platform (XP) vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new sitecore Experience Platform (XP) CVE, with AI-written analysis and remediation steps.