← Back to browse · API

CVE-2025-27218

Severity

MEDIUM

CVSS

5.3

EPSS

0.65003

Risk score

43.95

CISA KEV

No

PoC

No

Published

2025-02-20

Modified

2025-02-20

First seen

2026-08-07

Aliases

EUVD-2025-4575, GHSA-JX5R-CXFC-C638

Products

n/a:n/a n/a

Sources

euvd EUVD-2025-4575

Description

Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.

References