- Description
- Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue affects Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
- Source
- 9947ef80-c5d5-474a-bbab-97341a59000e
- NVD status
- Analyzed
- Products
- experience_commerce, experience_manager, experience_platform, managed_cloud
CVSS 3.1
- Type
- Secondary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- 9947ef80-c5d5-474a-bbab-97341a59000e
- CWE-502
- Hype score
- Not currently trending
CVE-2025-53691 (CVSS:8.8, HIGH) is Awaiting Analysis. Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) a..https://t.co/G2LB1SSJHV #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
8 Sept 2025
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 New CVE Alert: CVE-2025-53691 🚨 Critical Deserialization of Untrusted Data in Sitecore XM & XP (v9.0-10.4) ⚠️ Can lead to Remote Code Execution (RCE)! High risk of exploitation in the wild within 30 days. Update ASAP to protect your systems! 🛡️ #cybersecurity
@SecAideInfo
6 Sept 2025
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Critical Sitecore vulnerabilities (CVE-2025-53691 & 53693) are here! Our WAF now blocks exploitation attempts with new rules. Stay protected against remote code execution & cache poisoning. Patch your systems ASAP! 🛡️ https://t.co/ozmPIY90YW
@mveracf
6 Sept 2025
4 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Urgent WAF update! New rules now block critical vulnerabilities (RCE & cache poisoning) in Sitecore XM/XP 9.0-10.4. Protect your systems from CVE-2025-53691 & CVE-2025-53693. Stay secure! 🛡️ https://t.co/Lpuah0ibek
@CFchangelog
6 Sept 2025
74 Impressions
1 Retweet
2 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-53691 Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Remote Code Execution (RCE).This issue a… https://t.co/rILwcE756Y
@CVEnew
3 Sept 2025
279 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 @Sitecore exploit chain alert 🚨 🔵CVE-2025-53693 → HTML cache poisoning 🔵CVE-2025-53691 → RCE 🔵CVE-2025-53694 → Info disclosure Researchers show how attackers could hijack pages + execute arbitrary code on patched systems. 💬 What’s your CMS security
@TechNadu
30 Aug 2025
81 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
#threatreport #LowCompleteness Cache Me If You Can (Sitecore Experience Platform Cache Poisoning to RCE) | 29-08-2025 Source: https://t.co/nLIfDnEWDn Key details below ↓ 🎯Victims: Sitecore experience platform users, Website operators 🔓CVEs: CVE-2025-53691 https://t.co/n
@rst_cloud
30 Aug 2025
72 Impressions
0 Retweets
2 Likes
0 Bookmarks
0 Replies
0 Quotes
29/08/2025 🚨 Urgent warning: Researchers disclose critical vulnerabilities in Sitecore! Exploits include HTML cache poisoning (CVE-2025-53693) & RCE via insecure deserialization (CVE-2025-53691). Immediate action recommended! Source: https://t.co/l6bYIKdu56
@kernyx64
30 Aug 2025
118 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04",
"versionEndIncluding": "10.4",
"versionStartIncluding": "9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF",
"versionEndIncluding": "10.4",
"versionStartIncluding": "9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C",
"versionEndExcluding": "10.4",
"versionStartIncluding": "9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]