CVE-2021-42237: Sitecore XP Remote Command Execution Vulnerability. Sitcore

Sitecore XP Remote Command Execution Vulnerability. Sitcore XP contains an insecure deserialization vulnerability which can allow for remote code execution.

• CISA KEV-listed (remediation due 2022-04-15)
• used in ransomware campaigns
• EPSS 94.4% (100.0% percentile)

Detection rules

• Sitecore Pre-Auth RCE CVE-2021-42237 high

Browse the CVE database

Read the full analysis on IntelFusions