VDB
CVE-2025-34509
CVE-2025-34509
PUBLISHED
Sitecore XM ist ein Content-Management-System. Es ist sowohl als On-Premise-Lösung als auch als Cloud-Angebot verfügbar.
EPSS 16.87% · 95.1th percentile
Risk Scores
EPSS Score
16.87%
95.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sitecore | Sitecore Experience Manager |
Timeline
- CVE Published
- Oct 23, 2024 CrowdSec Sighting
- Oct 23, 2024 CrowdSec Sighting
- Nov 28, 2024 CrowdSec Sighting
- Jan 6, 2025 CrowdSec Sighting
- Jan 22, 2025 CrowdSec Sighting
- Jan 25, 2025 CrowdSec Sighting
- Feb 10, 2025 CrowdSec Sighting
- Feb 11, 2025 CrowdSec Sighting
- Mar 9, 2025 CrowdSec Sighting
- Mar 11, 2025 CrowdSec Sighting
- Mar 15, 2025 CrowdSec Sighting
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1345.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1345 advisory
- https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667 advisory
- https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-34509 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-34510 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-34511 advisory