DeutschShown in its original language — a full translation is planned for a future version.
Sitecore Experience Manager: Mehrere Schwachstellen
view advisory published 2025-06-17
Ein entfernter Angreifer kann mehrere Schwachstellen in Sitecore Experience Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, oder um beliebigen Programmcode auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-34511US | — | Exploit | ||
Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experience Platform (XP), through version 7.0 is vulnerable to an unrestricted file upload issue.… | ||||
| CVE-2025-34510US | — | Exploit | ||
Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A… | ||||
| CVE-2025-34509US | high7.5OT high | — | ||
Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev.… | ||||
02
references
External citations — patches, advisories, analysis.
- WatchTower Labs report vom 2025-06-17external
- National Vulnerability Database CVE-2025-34509 vom 2025-06-17external
- National Vulnerability Database CVE-2025-34510 vom 2025-06-17external
- National Vulnerability Database CVE-2025-34510 vom 2025-06-17external
- Sitecore Security Bulletin SC2025-003 vom 2025-06-17external
- WID-SEC-W-2025-1345 - CSAF Versionself
- WID-SEC-2025-1345 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan