Sitecore 漏洞

时间轴

类型

Not Defined10
Content Management System6
Customer Relationship Management System2

产品

Sitecore Experience Platform7
Sitecore CMS6
Sitecore Experience Manager2
Sitecore Experience Commerce2
Sitecore XP2

修正

Official Fix4
Temporary Fix0
Workaround0
Unavailable0
Not Defined14

易受攻击性

High0
Functional0
Proof-of-Concept5
Unproven0
Not Defined13

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network18

身份验证

Not Defined0
High1
Low11
None6

用户交互

Not Defined0
Required2
None16

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤55
≤63
≤73
≤86
≤91
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤53
≤63
≤73
≤86
≤91
≤100

VulDB

≤10
≤20
≤30
≤40
≤57
≤61
≤78
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤60
≤73
≤83
≤93
≤103

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k1
<2k17
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k18
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (9): CMS (6), CRM (2), Experience Commerce (2), Experience Manager (2), Experience Platform (7), Sitecore.NET (1), Staging Module (1), XM (1), XP (2)

已发布BaseTemp漏洞Prod易修正EPSSCTICVE
2023-06-188.07.9Sitecore Experience Manager Privilege Escalation未知Proof-of-ConceptNot Defined0.892270.07CVE-2023-35813
2023-06-067.57.5Sitecore Experience Platform Invoke.aspx Privilege Escalation未知Not DefinedNot Defined0.001190.02CVE-2023-33652
2023-06-066.96.9Sitecore Experience Platform MVC Device Simulator 权限升级未知Not DefinedNot Defined0.000840.00CVE-2023-33651
2023-06-067.57.5Sitecore Experience Platform Privilege Escalation未知Not DefinedNot Defined0.001180.00CVE-2023-33653
2023-05-238.07.9Sitecore Experience Platform ValidationResult.aspx 权限升级未知Not DefinedOfficial Fix0.001600.02CVE-2023-27068
2023-05-224.34.2Sitecore Experience Platform download.aspx 目录遍历未知Not DefinedNot Defined0.002090.02CVE-2023-27067
2023-05-225.45.3Sitecore Experience Platform Urlhandle 目录遍历未知Not DefinedNot Defined0.000940.03CVE-2023-27066
2023-03-156.76.6Sitecore XP/XM Language File 权限升级未知Not DefinedNot Defined0.001140.03CVE-2023-26262
2019-08-055.75.7Sitecore CMS 跨网站脚本Content Management SystemNot DefinedNot Defined0.001750.00CVE-2019-11198
2019-05-317.57.5Sitecore CMS CSRF Module 权限升级Content Management SystemNot DefinedNot Defined0.015210.00CVE-2019-9875

8 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 8 results.

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!