Security Advisory

CVE-2025-53691

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-03 12:36:59
Last updated 2025-09-03 13:49:39
Assigner Wiz
CVSS score 8.8
State PUBLISHED

Description

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.