What is the CVSS score of CVE-2025-34510?

CVE-2025-34510 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 87.3%.

Is there a public PoC exploit available for CVE-2025-34510?

Yes, a public proof-of-concept exploit is available for CVE-2025-34510. Prioritise patching immediately. EPSS: 87.3%.

How to fix or mitigate CVE-2025-34510?

Within 24 hours: Identify all Sitecore XM/XP/XC instances running versions 9.0-9.3 or 10.0-10.4 and inventory user accounts with upload/administration privileges. Within 7 days: Implement WAF rules to block malicious ZIP uploads and restrict administrative file upload functionality to trusted IPs only; disable the vulnerable upload feature if operationally feasible. Within 30 days: Plan and execute upgrade to Sitecore 10.5 or later, or migrate to SaaS versions; perform enhanced monitoring of all file upload activity and authentication logs.

Sitecore CVE-2025-34510

EUVD-2025-18525 HIGH

Relative Path Traversal (CWE-23)

2025-06-17 disclosure@vulncheck.com

RCE Path Traversal Experience Commerce Experience Manager Experience Platform Managed Cloud Sitecore

8.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-23 OWASP Top 10:2025 A01:2025 - Broken Access Control ASVS 5.0 V5 - File Handling Relative path traversal prevention
Impact	CVSS 8.8, EPSS 87.3%, PoC available. Sitecore is a major enterprise CMS platform used by Fortune 500 companies. Even content author-level access can exploit this vulnerability. Sitecore deployments typically host public-facing websites containing customer data and marketing assets.
Exploit ScenarioDerived	A content author with basic upload permissions crafts a ZIP file containing an ASPX webshell with a path traversal filename (../../webshell.aspx). They upload it through Sitecore's media library. The extraction writes the webshell to the web root. The attacker accesses it via HTTP, gaining OS-level access to the IIS server hosting Sitecore.

Act Now Prioritize within 24-48h. Why: HIGH severity + EPSS > 10%.

No patch listed yet 87.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 14, 2026

Sitecore Experience Manager, Platform, and Commerce versions 9.0 through 10.4 contain a Zip Slip vulnerability that allows authenticated attackers to write arbitrary files outside the intended upload directory. By crafting ZIP archives with path traversal entries, attackers can overwrite application files and achieve remote code execution.

Earlier versions of this analysis (1)

v1 Mar 14, 2026 - 22:15 CVSS 8.8

Zip Slip vulnerability in Sitecore CMS allows authenticated attackers to write arbitrary files to the web root for RCE.

RemediationAI

Apply the latest Sitecore security patch. Implement server-level controls to prevent file writes outside designated directories. Restrict upload permissions to trusted users. Monitor the web root for unexpected ASPX file creation.

Affected VersionsENISA

Experience Commerce 10.0 ≤10.4

Experience Manager 10.0 ≤10.4

Experience Platform 10.0 ≤10.4

Experience Commerce 9.0 ≤9.3

Experience Manager 9.0 ≤9.3

Experience Platform 9.0 ≤9.3

Affected Packages

euvd experience_commerce no fix

euvd experience_manager no fix

euvd experience_platform no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 3 packages in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The file upload functionality accepts ZIP archives and extracts their contents without properly validating entry paths. By including entries with ../../ prefixes in the ZIP archive, an attacker can write files to arbitrary locations on the filesystem. Writing an ASPX webshell to the Sitecore web root achieves code execution. The vulnerability requires authentication but not administrative privileges.

Know when Sitecore gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Sep 08, 2025 - 19:22 vuln.today

Public exploit code

CVE Published

Jun 17, 2025 - 19:15 nvd

HIGH 8.8

DescriptionCVE.org

Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A remote, authenticated attacker can exploit this issue by sending a crafted HTTP request to upload a ZIP archive containing path traversal sequences, allowing arbitrary file writes and leading to code execution.

Executive ViewAI

Why It Matters

Sitecore XM, XP, and XC customers running versions 9.0-9.3 and 10.0-10.4 face an immediate risk of unauthorized code execution through a Zip Slip vulnerability that requires only authenticated access. With a public exploit available and no patch released, this poses a critical threat to organizations using affected Sitecore instances for e-commerce, marketing automation, or customer experience management.

Business Impact: Severe

Compensating Controls

Implement Web Application Firewall (WAF) rules to detect and block ZIP files with path traversal patterns (../ sequences); restrict file upload endpoints to whitelisted internal IP ranges; enforce principle of least privilege on administrative accounts; disable the ZIP upload feature entirely if not critical to operations; enable detailed logging and alerting on all upload activity; segment Sitecore instances from production systems and databases using network controls; conduct regular code reviews of upload handling logic.

Threat Intelligence Overview

Threat Score

5.9/10

Composite threat intelligence

EPSS Score

87.3%

Top 1% exploitable

Exploit

POC

Public exploit code exists

Data Quality

5 sources

Confidence: Medium

EUVD

NVD

CVE.org

EPSS POC (1)

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC Yes

EPSS 87.3%

Patch available No

Active threat Yes

Deciding rule

HIGH severity + EPSS > 10%

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Immediate

Exploitation· derived

Active

System Exposure· derived

Open

Automatable· derived

Human Impact

Very High

Priority Score

166

Low Medium High Critical

KEV: 0

EPSS: +87

CVSS: +44

PoC: +20

Weaponized: +15

Threat intel: 0

Gov advisory: 0

Attack Technique

Path Traversal HIGH

Path traversal exploits occur when applications use user-controlled input to construct file system paths without proper validation.

Remote Code Execution CRITICAL

Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.

More in Sitecore

View all

CVE-2021-42237 CRITICAL Emergency POC

9.8 Nov 05

Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it

CVE-2025-34511 HIGH Act Now POC

8.8 Jun 17

Sitecore PowerShell Extensions through version 7.0 allows authenticated users to upload arbitrary files including ASPX w

CVE-2025-34509 HIGH Act Now POC

7.5 Jun 17

Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 through 10.4.1 contain a hardcoded administr

CVE-2023-35813 CRITICAL Act Now POC

9.8 Jun 17

Multiple Sitecore products allow remote code execution. Rated critical severity (CVSS 9.8), this vulnerability is remote

CVE-2023-27068 CRITICAL Act Now POC

9.8 May 23

Deserialization of Untrusted Data in Sitecore Experience Platform through 10.2 allows remote attackers to run arbitrary

CVE-2019-9874 CRITICAL Act Now POC

9.8 May 31

Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in Sitecore CMS 7.0 to 7.2 an

CVE-2023-33653 HIGH This Week POC

8.8 Jun 06

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil

CVE-2023-33652 HIGH This Week POC

8.8 Jun 06

Sitecore Experience Platform (XP) v9.3 was discovered to contain an authenticated remote code execution (RCE) vulnerabil

CVE-2021-38366 HIGH This Week POC

8.8 Aug 12

Sitecore through 10.1, when Update Center is enabled, allows remote authenticated users to upload arbitrary files and ac

CVE-2019-11080 HIGH This Week POC

8.8 Jun 06

Sitecore Experience Platform (XP) prior to 9.1.1 is vulnerable to remote code execution via deserialization, aka TFS # 2

CVE-2019-9875 HIGH This Week POC

8.8 May 31

Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an authenticated attacker to ex

CVE-2025-53694 HIGH This Week POC

7.5 Sep 03

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Sitecore Sitecore Experience Manager (XM), S

Same weakness CWE-23 – Relative Path Traversal

View all

CVE-2025-64446 CRITICAL POC

9.8

CVE-2024-27199 HIGH POC

7.3

CVE-2026-76519 CRITICAL POC

9.8

CVE-2026-34926 MEDIUM POC

6.7

CVE-2024-24578 CRITICAL POC

9.8

CVE-2025-52207 CRITICAL POC

9.9

CVE-2023-6825 CRITICAL POC

9.9

CVE-2022-1373 HIGH POC

7.2

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

10.0

CVE-2017-7269 CRITICAL POC

9.8

CVE-2022-47966 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2023-3519 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

References

Advisories & patches

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-34510 ADVISORY https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back