Known Vulnerabilities for Experience Platform by Sitecore
Listed below are 10 of the newest known vulnerabilities associated with "Experience Platform" by "Sitecore".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55212 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, the Studio API class definit... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-55207 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenticated attacker ... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-45704 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomReports uses incons... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-45703 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, the WordExport export flo... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-45260 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, Pimcore's WebDAV asset en... | Not Provided | 2026-07-17 | 2026-07-21 |
| CVE-2026-45162 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple Pimcore location... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-44739 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigAction en... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2023-35813 json | Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience ... | 9.8 - CRITICAL | 2023-06-17 | 2023-06-30 |
| CVE-2023-33653 json | Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability v... | 8.8 - HIGH | 2023-06-06 | 2023-06-14 |
| CVE-2023-33652 json | Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerability v... | 8.8 - HIGH | 2023-06-06 | 2023-06-14 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Sitecore | Experience Platform | 9.1.1 | |||
| Application | Sitecore | Experience Platform | 9.1 | |||
| Application | Sitecore | Experience Platform | 9.1 | |||
| Application | Sitecore | Experience Platform | 9.0 | |||
| Application | Sitecore | Experience Platform | 9.0 | |||
| Application | Sitecore | Experience Platform | 9.0 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.2 | |||
| Application | Sitecore | Experience Platform | 8.1 | |||
| Application | Sitecore | Experience Platform | 8.1 | |||
| Application | Sitecore | Experience Platform | 8.1 | |||
| Application | Sitecore | Experience Platform | 8.1 | |||
| Application | Sitecore | Experience Platform | 8.0 | |||
| Application | Sitecore | Experience Platform | 8.0 |