CVE-2023-35813
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2023-35813 is a critical vulnerability affecting multiple Sitecore products, including Experience Manager, Experience Platform, and Experience Commerce. The issue permits remote code execution, allowing attackers to manipulate affected systems and potentially gain unauthorized access. This vulnerability poses a significant risk, particularly for those using versions up to 10.3. Organizations using these Sitecore products are strongly urged to apply the necessary patches to mitigate this threat. Failure to do so may result in serious data breaches and system compromises.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Sitecore Experience Platform
- Sitecore Experience Manager
Affected Vendors
- Sitecore Holding II A/S