Critical severity9.8NVD Advisory· Published Sep 3, 2025· Updated Jun 17, 2026
CVE-2025-53693
CVE-2025-53693
Description
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*Range: >=9.0,<=10.4
cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*range: >=9.0,<10.4
- cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*
- (no CPE)range: 9.0 - 9.3, 10.0 - 10.4
- (no CPE)range: 9.0
- cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*
9.0 - 9.3, 10.0 - 10.4+ 1 more
- (no CPE)range: 9.0 - 9.3, 10.0 - 10.4
- (no CPE)range: 9.0
Patches
Vulnerability mechanics
References
2- labs.watchtowr.com/cache-me-if-you-can-sitecore-experience-platform-cache-poisoning-to-rce/nvdExploitThird Party Advisory
- support.sitecore.com/kbnvdVendor Advisory
News mentions
0No linked articles in our index yet.