Sitecore Managed Cloud

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.

HTML Cache Poisoning through Unsafe Reflections

Sitecore Products ViewState Deserialization Vulnerability

Sitecore PowerShell Extension RCE via Unrestricted Upload

Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip

Sitecore Experience Remote Code Execution through Insecure Deserialization

Sitecore XM and XP Hardcoded Credentials

Information Disclosure in ItemServices API

An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules.