CVE-2025-53694
HIGHSitecore XM/X - Info Disclosure
Title source: llmDescription
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP).This issue affects Sitecore Experience Manager (XM): from 9.2 through 10.4; Experience Platform (XP): from 9.2 through 10.4.
Exploits (2)
nomisec
WORKING POC
by brokendreamsclub · poc
https://github.com/brokendreamsclub/CVE-2025-53694-to-CVE-2025-53691
Scores
CVSS v3
7.5
EPSS
0.0011
EPSS Percentile
28.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-200
Status
published
Products (5)
sitecore/experience_commerce
9.2 - 10.4
sitecore/experience_manager
9.2 - 10.4
sitecore/experience_platform
10.4
sitecore/experience_platform
9.2 - 10.4
sitecore/managed_cloud
Published
Sep 03, 2025
Tracked Since
Feb 18, 2026