sitecore Experience Commerce Vulnerabilities

Sitecore Experience Commerce vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

25 July 2025

Remote Code Execution Vulnerability in Sitecore Experience Platform and Managed Cloud
CVE-2025-34138
SitecoreExperience Manager (xm)9.3CRITICAL
Arbitrary File Read Vulnerability in Sitecore Experience Manager and Platform Products
CVE-2025-34139
SitecoreExperience Manager (xm)8.7HIGH

17 June 2025

Path Traversal Vulnerability in Sitecore Experience Manager and Experience Platform
CVE-2025-34510
SitecoreExperience Manager👾🟡EPSS 80%8.8HIGH

15 September 2024

Unauthenticated File Read Vulnerability in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC)
CVE-2024-46938
SitecoreExperience CommerceEPSS 93%7.5HIGH

17 June 2023

Remote Code Execution Vulnerability in Sitecore Experience Manager and Platform
CVE-2023-35813
SitecoreExperience Platform👾🟡EPSS 93%9.8CRITICAL

6 June 2023

Authorization Bypass in Sitecore Experience Platform, Experience Manager, and Experience Commerce
CVE-2023-33651
SitecoreExperience Commerce7.5HIGH