What’s Vulnerable › Vulnerabilities

CVE-2024-46938

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 46.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-09-15 · updated 2026-06-17
• Weakness: CWE-200

Description

An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files.

Affected products

• Sitecore Experience Commerce: from 8.0 through 10.4
• Sitecore Experience Manager: from 8.0 through 10.4
• Sitecore Experience Platform: from 8.0 through 10.4

References

• https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003408

Get alerted when CVE-2024-46938 or the next vulnerability affects your stack