Is CVE-2009-1055 actively exploited?

CVE-2009-1055 has no public evidence of in-the-wild exploitation as of 2026-04-23.

What is the CVSS score for CVE-2009-1055?

CVE-2009-1055 has a CVSS score of 4 (UNKNOWN severity). Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N.

How do I patch CVE-2009-1055?

Patch guidance is available from sitecore security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2009-1055.

Which products are affected by CVE-2009-1055?

2 products: sitecore cms, sitecore cms.

CVE-2009-1055 - remediation guidance & executive summary

Description

Unspecified vulnerability in the web service in Sitecore CMS 5.3.1 rev. 071114 allows remote authenticated users to gain access to security databases, and obtain administrative and user credentials, via unknown vectors related to SOAP and XML requests.

CVSS Metrics

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Access Vector: network
Access Cmplx: low
Auth: single
Confidentiality: partial
Integrity: none
Availability: none
Weaknesses: NVD-CWE-Other

Metadata

Primary Vendor: SITECORE
Published: 3/24/2009
Last Modified: 4/23/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

CVE-2009-1055

Description

CVSS Metrics

Metadata

Affected Products

Remediation Guidance

Executive Summary