CVE-2025-34509
Full vulnerability record from the local CVENow database.
Description
Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-06-17 19:15:31.423000
Last modified
2026-10-29 21:17:05.177000
View original CVE JSON
{
"id": "CVE-2025-34509",
"sourceIdentifier": "[email protected]",
"published": "2025-06-17T19:15:31.423",
"lastModified": "2026-10-29T21:17:05.177",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP."
},
{
"lang": "es",
"value": "Sitecore Experience Manager (XM) y Experience Platform (XP) versiones 10.1 a 10.1.4 rev. 011974 PRE, todas las versiones 10.2, 10.3 a 10.3.3 rev. 011967 PRE y 10.4 a 10.4.1 rev. 011941 PRE contienen una cuenta de usuario codificada. Atacantes remotos no autenticados pueden usar esta cuenta para acceder a la API administrativa a través de HTTP."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Sitecore",
"product": "Experience Manager",
"defaultStatus": "unaffected",
"versions": [
{
"version": "10.4",
"lessThan": "10.4.1 rev. 011941 PRE",
"versionType": "custom",
"status": "affected"
},
{
"version": "10.3",
"lessThan": "10.3.3 rev. 011967 PRE",
"versionType": "custom",
"status": "affected"
},
{
"version": "10.2",
"lessThan": "10.3",
"versionType": "custom",
"status": "affected"
},
{
"version": "10.1",
"lessThan": "10.1.4 rev. 011974 PRE",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Sitecore",
"product": "Experience Platform",
"defaultStatus": "unaffected",
"versions": [
{
"version": "10.4",
"lessThan": "10.4.1 rev. 011941 PRE",
"versionType": "custom",
"status": "affected"
},
{
"version": "10.3",
"lessThan": "10.3.3 rev. 011967 PRE",
"versionType": "custom",
"status": "affected"
},
{
"version": "10.2",
"lessThan": "10.3",
"versionType": "custom",
"status": "affected"
},
{
"version": "10.1",
"lessThan": "10.1.4 rev. 011974 PRE",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-06-18T03:56:10.468989Z",
"id": "CVE-2025-34509",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-798"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndIncluding": "10.4",
"matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*",
"versionStartIncluding": "9.0",
"versionEndExcluding": "10.4",
"matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*",
"matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*",
"matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"
}
]
}
]
}
],
"references": [
{
"url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
}
]
}