Exploit / PoChighExploited in the wild

U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsMar 27, 2025 · 12:31 UTC (Mar 27, 2025)1 min read4

Read at securityaffairs.com

Analyze CVE-2019-9875 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-9875 CVE-2019-9874 CVE-2025-30154

Tags: cve-2019-9875 cve-2019-9874 cve-2025-30154 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-9874 +1 related CVE CVE-2019-9875	Unauthenticated .NET Deserialization RCE in Sitecore CMS and Experience Platform	9.8 group max	84%	KEVPoC	May 31, 2019 KEV Mar 26, 2025
CVE-2025-30154	Malicious Code in reviewdog/action-setup GitHub Action Exposes CI/CD Secrets	8.6	2%	KEVPoC	Mar 19, 2025 KEV Mar 24, 2025

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.