VULNERABILITY INTELLIGENCE

CVE-2025-53694

CVSS score7.5 HIGH

EPSS probability6.72%

CISA KEVNot currently listed

Published2025-09-03

Last modified2026-10-18

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (XP): from 9.2 through 10.4.

Weakness classification

9947ef80-c5d5-474a-bbab-97341a59000e: CWE-200
nvd@nist.gov: NVD-CWE-noinfo

Primary references

9947ef80-c5d5-474a-bbab-97341a59000e — Exploit, Third Party Advisory
9947ef80-c5d5-474a-bbab-97341a59000e — Vendor Advisory