Skip to content

Known CVE

Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - Insecure Deserialization

Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.

CVE-2025-27218

Medium2025CVSS 5.3CWE-94

cve2025 · oast · oob · sitecore · rce · vkev · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website