Description (CNA)
Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Sitecore / Experience Manager (XM) | affected 0 through 9.0 |
| Sitecore / Experience Platform (XP) | affected 0 through 9.0 |
CWE
CWE-502
References
- https://cloud.google.com/blog/topics/threat-intelligence/viewstate-deserialization-zero-day-vulnerability
- https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865
ADP enrichment
No English description supplied.