Lucene search
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.WEB_APPLICATION_SCANNING_113077HistoryDec 15, 2021 - 12:00 a.m.
Sitecore XP 7.5.0 <= 8.2.7 Remote Code Execution
2021-12-1500:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.
No source data| Vendor | Product | Version | CPE |
|---|---|---|---|
| sitecore | experience_platform | * | cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:* |