CISA's list that day

26 March 2025

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in Sitecore CMS and Experience Platform (XP). US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2019-9874DeserializationSitecore CMS and Experience Platform (XP)Patch this weekEPSS 0.840.84
CVE-2019-9875DeserializationSitecore CMS and Experience Platform (XP)Patch soon0.14

Other changes that day

  1. CVE-2020-6572 Google Chrome MediaEdited: name.
  2. CVE-2024-4761 Google Chromium V8Renamed from Chromium Visuals to Chromium V8.
  3. CVE-2025-30066 tj-actions changed-files GitHub ActionEdited: notes.
  4. CVE-2025-30154 reviewdog action-setup GitHub ActionEdited: notes.