CVE-2021-42237 Sitecore XP
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Sitecore XP Remote Command Execution Vulnerability
- Added
- 2022-03-25
- Federal patch deadline
- 2022-04-15
- Ransomware use
- known