VDB
CVE-2024-46938
CVE-2024-46938
PUBLISHED
KEV
CVSS 8.600000381469727 HIGH
An issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release through 10.4 Initial Release. An unauthenticated attacker can read arbitrary files.
EPSS 46.77% · 98.7th percentile
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
46.77%
98.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| sitecore | experience_commerce | 8.0, 8.0 |
| sitecore | experience_manager | 8.0, 8.0 |
| sitecore | experience_platform | 8.0, 8.0 |
| sitecore | experience_platform | 8.0, 8.0 |
| sitecore | experience_commerce | 8.0, 8.0 |
| sitecore | experience_manager | 8.0, 8.0 |
| n/a | n/a | n/a, n/a |
Timeline
- Sep 15, 2024 CVE Published
- Sep 16, 2024 EPSS Score
- Sep 16, 2024 PoC Published
- Sep 17, 2024 CVE Updated
- Oct 5, 2024 Coalition ESS Score
- Oct 25, 2024 EPSS Score
- Nov 14, 2024 EPSS Score
- Nov 22, 2024 PoC Published
- Nov 22, 2024 PoC Published
- Dec 5, 2024 EPSS Score
- Dec 13, 2024 EPSS Score
- Dec 31, 2024 EPSS Score