Veille CVE

Recherche « Sitecore experience platform »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Sitecore experience platform » ✕
  1. CVE-2021-42237 9.8 Critique Exploitée Rançongiciel

    Sitecore experience platform

    Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.

  2. CVE-2019-9875 8.8 Élevée Exploitée

    Sitecore cms

    Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to execute arbitrary code by sending a serialized .NET object in an HTTP POST parameter.