CVE security advisories and vulnerability history for Sitecore Experience Platform (XP) by sitecore.
Last updated
Sitecore Experience Platform (XP) has 5 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 8.4.
How the CVSS severity of Sitecore Experience Platform (XP)'s CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of Sitecore Experience Platform (XP)'s CVEs are currently listed in CISA's KEV catalog.
Public exploits
4
4 of Sitecore Experience Platform (XP)'s CVEs have a known public exploit available.
Browse every Sitecore Experience Platform (XP) version named in a CVE, then pick one to see only the CVEs that affect it.
No specific affected versions are recorded for Sitecore Experience Platform (XP); the CVEs below apply to the product without a version pin.
5 CVEs
The CWE weakness categories most often found in Sitecore Experience Platform (XP) CVEs. Follow any weakness for its full explanation.
Browse vulnerabilities for other products by sitecore.
Common questions about Sitecore Experience Platform (XP) vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Get an alert for each new Sitecore Experience Platform (XP) CVE, with AI-written analysis and remediation steps.
