CVE

CVE-2021-42237

P1⬤ KNOWN RANSOMWARE USE

Sitecore XP Remote Command Execution Vulnerability

Sitecore · XP

Date added (CISA)

2022-03-25

Remediation due

2022-04-15

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.