CVE-2025-34138: Sitecore XM/XP/XC and Managed Cloud 9.2 - 10.4 RCE
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority, as it is a duplicate of CVE-2025-53692 and CVE-2025-53694.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34138?
CVE-2025-34138 has been classified with a high severity rating due to its potential for remote code execution.
How do I fix CVE-2025-34138?
To fix CVE-2025-34138, you should update to the latest patched version of Sitecore Experience Manager, Experience Platform, Experience Commerce, or Managed Cloud.
What products are affected by CVE-2025-34138?
CVE-2025-34138 affects Sitecore Experience Manager, Experience Platform, Experience Commerce, and Managed Cloud versions between 9.2 and 10.4.
Can CVE-2025-34138 allow unauthorized access?
Yes, CVE-2025-34138 could allow unauthorized access to sensitive information within the affected Sitecore products.
What are the potential impacts of CVE-2025-34138?
The potential impacts of CVE-2025-34138 include remote code execution and unauthorized access to information, posing significant risks to affected systems.