CVE-2009-1055

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-24 · updated 2026-06-16

Description

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.

Affected products

Sitecore Cms: 5.3.0, 5.3.1

References

http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx
http://secunia.com/advisories/34356
http://www.securityfocus.com/archive/1/501929/100/0/threaded
http://www.securityfocus.com/bid/34162
http://www.vupen.com/english/advisories/2009/0753
https://exchange.xforce.ibmcloud.com/vulnerabilities/49298
http://sdn5.sitecore.net/Products/Sitecore%20V5/Sitecore%20CMS%205%2C-d-%2C3/ReleaseNotes/V5%2C-d-%2C3%2C-d-%2C2/ChangeLog.aspx
http://secunia.com/advisories/34356
http://www.securityfocus.com/archive/1/501929/100/0/threaded
http://www.securityfocus.com/bid/34162
http://www.vupen.com/english/advisories/2009/0753
https://exchange.xforce.ibmcloud.com/vulnerabilities/49298

Get alerted when CVE-2009-1055 or the next vulnerability affects your stack