sitecore cms güvenlik açıkları (CVE)

sitecore cms için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

4 sonuç
5.1Orta
CVE-2022-4979

Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS

Sitecore Experience Platform; Sitecore Content Mangement System (CMS); Sitecore Managed Cloud

A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who ru…

6.9Orta
CVE-2015-10142

Sitecore XP < 8.0 and CMS < 7.2 and < 7.5 File Read via Known Path

Sitecore Experience Platform (XP); Sitecore Content Management System (CMS)

Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev. 141212) and Content Management System (CMS) prior to 7.2 Update-3 (rev. 141226) and prior to 7.5 Update-1 (rev. 150130) contain a vulnerability that may allow an attacker to download files u…

9.8Kritik
CVE-2019-9874 KEV

Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

sitecore cms; sitecore experience platform

Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 and Sitecore XP 7.5 to 8.2 allows an unauthenticated attacker to execute arbitrary code by sending a serialized .NET object in the HTTP POST …

84%EPSS