CVE-2025-34510

🗓️ 17 Jun 2025 19:39:36Reported by CirclType

circl

circl🔗 cve.circl.lu👁 12 Views

CVE-2025-34510 information on timestamps and sources for seen status updates.

Reporter	Title	Published	Views	Family All 19
BDU FSTEC	The vulnerability of the Sitecore Experience Manager (XM), Experience Platform (XP), and the Experience Commerce (XC) platform for personalized purchasing processes lies in errors in processing the relative path to the catalog. This allows attackers to gain access to arbitrary files and execute arbitrary code.	12 Jan 202600:00	–	bdu_fstec
CNNVD	Sitecore多款产品安全漏洞	17 Jun 202500:00	–	cnnvd
CVE	CVE-2025-34510	17 Jun 202518:46	–	cve
Cvelist	CVE-2025-34510 Sitecore XM, XC, and XP Post-Auth RCE via Zip Slip	17 Jun 202518:46	–	cvelist
EUVD	EUVD-2025-18525	17 Jun 202518:46	–	euvd
Metasploit	Sitecore XP CVE-2025-34510 Post-Authentication Remote Code Execution	11 Sep 202518:57	–	metasploit
NVD	CVE-2025-34510	17 Jun 202519:15	–	nvd
OSV	CVE-2025-34510	17 Jun 202519:15	–	osv
Packet Storm	📄 Sitecore XP Post-Authentication Remote Code Execution	12 Sep 202500:00	–	packetstorm
Positive Technologies	PT-2025-25750	17 Jun 202500:00	–	ptsecurity

Source	Link
bsky	www.bsky.app/profile/beikokucyber.bsky.social/post/3lyo5wahsaf25
bsky	www.bsky.app/profile/buherator.bsky.social/post/3lxjwsxkfqc27
bsky	www.bsky.app/profile/cve.skyfleet.blue/post/3lrthkfqyji2m
bsky	www.bsky.app/profile/r1cksec.bsky.social/post/3lrzhnis6ik2o
gist	www.gist.github.com/alon710/dc055af9a98dd7c0502695e0514823d3
gist	www.gist.github.com/alon710/dfadc874106eaccc5a5d155a41499d26
github	www.github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sitecore_xp_cve_2025_34510.rb
infosec	www.infosec.exchange/users/cR0w/statuses/114700449431770143
t	www.t.me/DarkWebInformer_CVEAlerts/18657
vulnerability	www.vulnerability.circl.lu/bundle/b0453b3f-aa70-494d-8cbf-b4217e22de4a

17 Jun 2025 19:39Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.8

EPSS0.09312

SSVC

cve identification timestamps sources