Known vulnerabilities in Sitecore Experience Commerce

Vendor: Sitecore

Website: https://www.sitecore.com/

Total Security Bulletins: 4

Security bulletins (4)

Secuity bulletin	Severity	Status	Published
SB2025112528: Sitecore products update for Progress Telerik UI for ASP.NET AJAX	Medium	Patched	25.11.2025
SB2025112521: Multiple vulnerabilities in Sitecore products	Medium	Patched	25.11.2025
SB2025112520: Path traversal in Sitecore products	High	Patched	25.11.2025
SB2025090436: Remote code execution in Sitecore products	Critical	Patched Exploited	04.09.2025