CVE-2021-42237
🗓️ 05 Nov 2021 09:51:18Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 1260 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 34 |
|---|---|---|---|---|
 | Sitecore Experience Platform (XP) Remote Code Execution Exploit | 16 Nov 202100:00 | – | zdt |
 | 2021 Top Routinely Exploited Vulnerabilities | 28 Apr 202212:00 | – | ics |
| Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors | 6 Oct 202212:00 | – | ics |
 | CVE-2021-42237 | 5 Nov 202100:00 | – | attackerkb |
 | Joint Advisory AA22-279A and Vulristics | 21 Oct 202220:10 | – | avleonov |
 | Sitecore XP Code Execution | 4 Jan 202200:00 | – | bdu_fstec |
 | CVE-2021-42237 | 5 Nov 202113:25 | – | circl |
 | Sitecore XP Remote Command Execution Vulnerability | 25 Mar 202200:00 | – | cisa_kev |
 | Sitecore code-related vulnerabilities | 5 Nov 202100:00 | – | cnnvd |
 | Sitecore XP Remote Code Execution (CVE-2021-42237) | 6 Feb 202200:00 | – | checkpoint_advisories |
10
Node
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| parameters | request body | /sitecore/shell/ClientBin/Reporting/Report.ashx | Pre-auth deserialization vulnerability allowing RCE via the Report.ashx endpoint on Sitecore XP 7.5–8.2 when processing the parameters payload. | CWE-502 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Jul 2026 13:57Current
9.7Critical risk
Vulners AI Score9.7
CVSS 3.19.8
CVSS 210
EPSS0.97566
SSVC