FAIL › dossier
XP
PRODUCT· dossier confidence 20%
Sitecore XP is a content management system with a critical security track record, having suffered high-severity vulnerabilities like remote code execution and session fixation that were actively exploited in ransomware attacks against DIB organizations.
PROFILE
CategoryContent Management SystemWhat they doSitecore XP is a content management system (CMS) platform used for digital experiences and content management.
Websitehttps://www.sitecore.com ↗
SECURITY POSTURE
The platform has a documented history of critical vulnerabilities, including remote code execution and session fixation issues, that have been actively exploited in ransomware attacks.
Notable failures
- CVE-2021-42237 RCE
- CVE-2024-23679 session fixation
Patterns: critical unpatched vulnerabilities exploited in ransomware
FAILURE HISTORY · 2
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2022-03-25 | CVE-2021-42237 | critical | Sitecore XP's insecure deserialization allowed for remote code execution, actively exploited in ransomware attacks, impacting DIB organizations using the platform for content management and web applications. |
| 2024-01-19 | CVE-2024-23679 | critical | CVE-2024-23679: Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. A |
DOSSIER SOURCES
- Sitecore - Overview, News & Similar companies | ZoomInfo.com · www.zoominfo.com
- XP (XP) Company Profile, History, Products & Services · www.financecharts.com
- XP Inc.: Shareholders Board Members Managers and Company Profile ... · www.marketscreener.com
Open questions: founding date and headquarters location of Sitecore XP · ownership structure of Sitecore XP
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-09-06 03:56:24.347380+00:00