CVE-2025-53690

Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

Experience Commerce

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.

3. Sep 2025

Ausgewertete Quellen

• Hersteller
  https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865
• Hinweis
  https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-53690
• CISA
  Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
• NVD
  CVE-2025-53690