CVEs published by Wiz

CVEs published by Wiz (CVE Numbering Authority). 7 tracked.

CVE-2025-53690 CRITICAL 9.0 EXPLOITED UPGRADE UPGRADE Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
CVE-2025-53693 CRITICAL 9.8 UPGRADE UPGRADE Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore S
CVE-2025-53694 HIGH 7.5 UPGRADE UPGRADE Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manag
CVE-2025-53691 HIGH 8.8 UPGRADE UPGRADE Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platf
CVE-2025-53692 HIGH 7.1 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in S
CVE-2025-8110 HIGH 8.8 EXPLOITED UPGRADE Gogs Path Traversal Vulnerability
CVE-2024-9145 HIGH 7.1 Wiz Code Visual Studio Code extension in versions 1.0.0 up to 1.5.3 and Wiz (legacy) Visual Studio Code extens