high7.5
CVE-2025-53694
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This i…
Impact
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (XP): from 9.2 through 10.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sitecore | Experience Commerce | from 9.2 through 10.4 |
| Sitecore | Experience Manager | from 9.2 through 10.4 |
| Sitecore | Experience Platform | from 9.2 before 10.4 Version 10.4 |
| Sitecore | Managed Cloud | All versions |