What’s Vulnerable › Products

Sitecore Managed Cloud vulnerabilities

11 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Sitecore Managed Cloud version is affected

Exploited Sitecore Managed Cloud vulnerabilities

• CVE-2025-53690 — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Latest Sitecore Managed Cloud vulnerabilities

• CVE-2025-53690 — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability (CVSS 9.0) — exploited
• CVE-2025-53694 — Information Disclosure in ItemServices API (CVSS 7.5)
• CVE-2025-53693 — HTML Cache Poisoning through Unsafe Reflections (CVSS 9.8)
• CVE-2025-53691 — Sitecore Experience Remote Code Execution through Insecure Deserialization (CVSS 8.8)
• CVE-2025-34139 — Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read (CVSS 8.7)
• CVE-2022-4979 — Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS (CVSS 5.1)
• CVE-2025-34511 — Sitecore PowerShell Extension RCE via Unrestricted Upload (CVSS 8.8)
• CVE-2025-34510 — Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip (CVSS 8.8)
• CVE-2025-34509 — Sitecore XM and XP Hardcoded Credentials (CVSS 7.5)
• CVE-2023-35813 — (CVSS 9.8)
• CVE-2023-33651 — (CVSS 7.5)