Skip to main content

XP vulnerabilities

1 published alerts for Sitecore XP.

Actively exploited (KEV)Ransomware

CVE-2021-42237

Sitecore XP Remote Command Execution Vulnerability

Sitecore XP is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-42237). Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution. CISA remediation due date: 2022-04-15. If you need help checking exposure, call (864) 335-9223.