FAIL › dossier
CMS and Experience Platform (XP)
PRODUCT· dossier confidence 0%
XP Inc. is a Brazilian financial technology company operating an open platform for investment products and financial services. Its security posture is compromised by a documented history of critical remote code execution vulnerabilities in its Sitecore CMS, specifically CVE-2019-9875 and CVE-2019-9874, which allowed attackers to execute arbitrary code via deserialization flaws in the Anti-CSRF module.
The company's security posture is characterized by a history of critical remote code execution (RCE) vulnerabilities in its Sitecore CMS, specifically CVE-2019-9875 and CVE-2019-9874, which allowed both authenticated and unauthenticated attackers to execute arbitrary code via deserialization flaws in the Anti-CSRF module.
- CVE-2019-9875: Authenticated RCE via Sitecore Anti-CSRF deserialization
- CVE-2019-9874: Unauthenticated RCE via Sitecore Anti-CSRF deserialization
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2025-03-26 | CVE-2019-9875 | high | Sitecore CMS allowed authenticated attackers to execute arbitrary code via a deserialization vulnerability in its Anti-CSRF module. |
| 2025-03-26 | CVE-2019-9874 | high | Sitecore CMS allowed unauthenticated code execution via a deserialization vulnerability in its anti-CSRF module. |
- XP Inc. (XP) Company Profile & Description - Stock Analysis · stockanalysis.com
- Company Overview - XP - NASDAQ - Weiss Ratings · weissratings.com
- XP Inc. (XP) Company Profile - Business Overview, Management Team ... · stocknear.com
- XP (XP) Company Profile, History, Products & Services · www.financecharts.com
- Guilherme Benchimol - Forbes · www.forbes.com
- Company Overview - XP - NASDAQ - Weiss Ratings · weissratings.com