Experience Commerce (XC) vulnerabilities

1 known vulnerability in Experience Commerce (XC) from Sitecore. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Experience Manager (XM): Insufficiently Protected Credentials

  CVE-2025-34139Jul 25, 2025Sitecore

  A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow an unauthenticated attacker to read arbitrary files. This vulnerability affects all Experience Platform topologie