CVE-2025-53690 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects…
Critical KEV CVSS: 9.0

CVE-2025-53690

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.
Vendor
Sitecore
Product
Experience Commerce
CWE
CWE-502
Yayın Tarihi
2025-09-03 20:15:33
Güncelleme
2025-10-30 20:39:16
Source Identifier
9947ef80-c5d5-474a-bbab-97341a59000e
KEV Date Added
2025-09-04

Kategoriler

CWE-502 Experience Commerce CRITICAL Sitecore 2025

Referanslar

https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53690