CVE-2019-11080

Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863

published June 6, 2019

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863. An authenticated user with necessary permissions is able to remotely execute OS commands by sending a crafted serialized object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13946 · 96.5th percentile
Published
2019-06-06T13:33Z
EPSS history
Timeline
  • 06 JUN 13:33Z
    Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 293863
    cvelistv5