- Description
- Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
- Source
- 9947ef80-c5d5-474a-bbab-97341a59000e
- NVD status
- Analyzed
- Products
- experience_commerce, experience_manager, experience_platform, managed_cloud
CVSS 3.1
- Type
- Secondary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- 9947ef80-c5d5-474a-bbab-97341a59000e
- CWE-470
- Hype score
- Not currently trending
[CVE-2025-53693: CRITICAL] Vulnerability in Sitecore XM/XP allows Cache Poisoning by unsafe reflection. Versions affected: XM 9.0-9.3, 10.0-10.4; XP 9.0-9.3, 10.0-10.4. #cybersecurity#cve,CVE-2025-53693,#cybersecurity https://t.co/hmEtdw61Iy
@CveFindCom
8 Sept 2025
135 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-53693 (CVSS:9.8, CRITICAL) is Awaiting Analysis. Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Ex..https://t.co/2dfLT2Mq2p #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
8 Sept 2025
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 Urgent WAF update! New rules now block critical vulnerabilities (RCE & cache poisoning) in Sitecore XM/XP 9.0-10.4. Protect your systems from CVE-2025-53691 & CVE-2025-53693. Stay secure! 🛡️ https://t.co/Lpuah0ibek
@CFchangelog
6 Sept 2025
74 Impressions
1 Retweet
2 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-53693 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Pla… https://t.co/HcLRR6Hydl
@CVEnew
3 Sept 2025
260 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 @Sitecore exploit chain alert 🚨 🔵CVE-2025-53693 → HTML cache poisoning 🔵CVE-2025-53691 → RCE 🔵CVE-2025-53694 → Info disclosure Researchers show how attackers could hijack pages + execute arbitrary code on patched systems. 💬 What’s your CMS security
@TechNadu
30 Aug 2025
81 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
29/08/2025 🚨 Urgent warning: Researchers disclose critical vulnerabilities in Sitecore! Exploits include HTML cache poisoning (CVE-2025-53693) & RCE via insecure deserialization (CVE-2025-53691). Immediate action recommended! Source: https://t.co/l6bYIKdu56
@kernyx64
30 Aug 2025
118 Impressions
0 Retweets
1 Like
1 Bookmark
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04",
"versionEndIncluding": "10.4",
"versionStartIncluding": "9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF",
"versionEndIncluding": "10.4",
"versionStartIncluding": "9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C",
"versionEndExcluding": "10.4",
"versionStartIncluding": "9.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]