CVE-2025-34509

Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP.

CVSS v3 8.2 HIGH

8.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/	Exploit Third Party Advisory
https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sitecore:experience_commerce::::::::
	cpe:2.3:a:sitecore:experience_manager::::::::
	cpe:2.3:a:sitecore:experience_platform::::::::
	cpe:2.3:a:sitecore:experience_platform:10.4:-::::::
	cpe:2.3:a:sitecore:managed_cloud:-:::::::*

History

No history.

Information

Published : 2025-06-17 19:15

Updated : 2025-09-08 19:17

NVD link : CVE-2025-34509

Mitre link : CVE-2025-34509

CVE.ORG link : CVE-2025-34509

JSON object : View

Products Affected

sitecore

experience_manager
managed_cloud
experience_commerce
experience_platform

CWE

CWE-798

Use of Hard-coded Credentials

{"id": "CVE-2025-34509", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-06-17T19:15:31.423", "references": [{"url": "https://labs.watchtowr.com/is-b-for-backdoor-pre-auth-rce-chain-in-sitecore-experience-platform/", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003667", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 10.1.4 rev. 011974 PRE, all versions of 10.2, 10.3 to 10.3.3 rev. 011967 PRE, and 10.4 to 10.4.1 rev. 011941 PRE contain a hardcoded user account. Unauthenticated and remote attackers can use this account to access administrative API over HTTP."}, {"lang": "es", "value": "Sitecore Experience Manager (XM) y Experience Platform (XP) versiones 10.1 a 10.1.4 rev. 011974 PRE, todas las versiones 10.2, 10.3 a 10.3.3 rev. 011967 PRE y 10.4 a 10.4.1 rev. 011941 PRE contienen una cuenta de usuario codificada. Atacantes remotos no autenticados pueden usar esta cuenta para acceder a la API administrativa a trav\u00e9s de HTTP."}], "lastModified": "2025-09-08T19:17:06.773", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCF77DC5-9DF9-4DF7-9636-69CA4BEEDB04", "versionEndIncluding": "10.4", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17EF29D0-E1DA-4F84-95F4-EA9680EB47DF", "versionEndIncluding": "10.4", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88455751-A525-4A59-9DD8-4E015CD1346C", "versionEndExcluding": "10.4", "versionStartIncluding": "9.0"}, {"criteria": "cpe:2.3:a:sitecore:experience_platform:10.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "78E71AD1-04C7-4D80-9A0A-E386A3FAC860"}, {"criteria": "cpe:2.3:a:sitecore:managed_cloud:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "520CF670-01A2-479F-B637-C413A82463E0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}