Approved changes feed: RSS · Atom

cpe:2.3:a:sitecore:managed_cloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSitecore (a7d448aa-2b42-539c-981e-05d11ea00680)
ProductManaged Cloud (70489955-3888-5da6-bcb2-c7d13461c029)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-34139 vulnerable 2026-06-03 15:00:43.749348 Sitecore XM/XP/XC and Managed Cloud 8.0 - 10.4 Arbitrary File Read
A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow an unauthenticated attacker to read arbitrary files. This vulnerability affects all Experience Platform topologies (XM, XP, XC) from 8.0 Initial Release through 10.4 Initial Release and later. This issue affects Content Management (CM) and standalone instances. PaaS and containerized solutions are also affected.
Published: 2025-07-25T15:54:25.297Z
Updated: 2025-11-19T01:28:37.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35813 vulnerable 2026-06-03 14:52:18.939360 Details available
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
Published: 2023-06-17T00:00:00.000Z
Updated: 2024-12-17T16:20:49.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4979 vulnerable 2026-06-03 14:48:44.411842 Sitecore XP 7.5 - 10.2, CMS 7.2, and Managed Cloud XSS
A cross-site scripting (XSS) vulnerability exists in Sitecore Experience Platform (XP) 7.5 - 10.2 and CMS 7.2 - 7.2 Update-6 that may allow authenticated Sitecore Shell users to be tricked into executing custom JS code. Managed Cloud Standard customers who run the affected Sitecore Experience Platform / CMS versions are also affected.
Published: 2025-07-25T15:55:36.039Z
Updated: 2026-03-23T15:43:29.702Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.