Back to CVE Browser

CVE-2021-42237

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score79.9940%

EPSS Percentile87.66th

Published2021-11-05

Last Modified2026-07-09

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://packetstormsecurity.com/files/164988/Sitecore-Experience-Platform-XP-Remote-Code-Execution.html

🔗 https://blog.assetnote.io/2021/11/02/sitecore-rce/

🔗 https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776

🔗 http://packetstormsecurity.com/files/164988/Sitecore-Experience-Platform-XP-Remote-Code-Execution.html

🔗 https://blog.assetnote.io/2021/11/02/sitecore-rce/

🔗 https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1000776

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-42237

Related Vulnerabilities

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2021-42237 Detail & Impact Analysis | CVSS 9.8 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space