VDB
CVE-2025-34509
CVE-2025-34509
PUBLISHED
KEV
Sitecore XM ist ein Content-Management-System. Es ist sowohl als On-Premise-Lösung als auch als Cloud-Angebot verfügbar.
EPSS 55.87% · 99.0th percentile
Risk Scores
EPSS Score
55.87%
99.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sitecore | Sitecore Experience Manager |
Timeline
- CVE Published
- Jun 17, 2025 PoC Published
- Jun 17, 2025 PoC Published
- Jun 17, 2025 PoC Published
- Jun 18, 2025 EPSS Score
- Jun 20, 2025 PoC Published
- Jun 20, 2025 PoC Published
- Jun 22, 2025 VulnCheck KEV Exploitation
- Jun 28, 2025 EPSS Score
- Jul 10, 2025 VulnCheck KEV Exploitation
- Jul 19, 2025 EPSS Score
- Jul 29, 2025 EPSS Score
References
- Nuclei Template exploit
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1345.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1345 advisory
- https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667 advisory
- https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/ advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-34509 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-34510 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-34511 advisory