Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce

🗓️ 04 Sep 2025 19:53:25Reported by rxeriumType

githubexploit

githubexploit🔗 github.com👁 297 Views

CVE-2025-53690 deserialization vulnerability in Sitecore Experience Manager and Platform up to 9.0.

Reporter	Title	Published	Views	Family All 21
GithubExploit	Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce	5 Nov 202506:50	–	githubexploit
BDU FSTEC	The vulnerability of the Sitecore Experience Manager (XM), Experience Platform (XP), and the Experience Commerce (XC) platform for personalized purchasing processes is related to deficiencies in the deserialization mechanism. This allows attackers to execute arbitrary code and gain unauthorized access to protected information.	26 Jan 202600:00	–	bdu_fstec
Circl	CVE-2025-53690	3 Sep 202519:30	–	circl
CISA KEV Catalog	Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability	4 Sep 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	4 Sep 202512:00	–	cisa
CNNVD	Sitecore Experience Manager 安全漏洞	3 Sep 202500:00	–	cnnvd
CVE	CVE-2025-53690	3 Sep 202520:04	–	cve
Cvelist	CVE-2025-53690 Sitecore Products ViewState Deserialization Vulnerability	3 Sep 202520:04	–	cvelist
EUVD	EUVD-2025-26629	3 Sep 202520:04	–	euvd
HackRead	Zero-Day in Sitecore Exploited to Deploy WEEPSTEEL Malware	8 Sep 202515:48	–	hackread

05 Sep 2025 12:30Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.19

EPSS0.26308

deserialization Sitecore Experience Manager Sitecore Experience Platform version 9.0