Sitecore
CVEs currently on EVULNABLE's Priority Feed for Sitecore, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 4 Sitecore CVEs in EVULNABLE's ranked feed.
#1 93 Immediate CVE-2021-42237 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV Sitecore — Sitecore XP Remote Command Execution Vulnerability KEV + ransomware, EPSS 97.6%
EVRS 93/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 84 Urgent CVE-2019-9874 KEV since 2025 · listed over a yearCISA KEV Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability KEV, EPSS 83.7%
EVRS 84/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.837.
#3 76 Urgent CVE-2025-53690 KEV since 2025 · listed over a yearCISA KEV Sitecore — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability KEV, EPSS 60.6%
EVRS 76/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.606.
#4 75 Urgent CVE-2019-9875 KEV since 2025 · listed over a yearCISA KEV Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability KEV, EPSS 13.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.138.