- Vendor / Project
- Sitecore
- Product
- XP
- Date added
- Mar 25, 2022
- Due date
- Apr 15, 2022
- Known ransomware use
- Known
- CWEs
- CWE-502
Description
Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.
Required action
Apply updates per vendor instructions.