CVE-2023-35813

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Jun 17, 2023
Updated: Dec 17, 2024
CWE ID 94

Summary

CVE-2023-35813 is a critical vulnerability affecting multiple Sitecore products, including Experience Manager, Experience Platform, and Experience Commerce. The issue permits remote code execution, allowing attackers to manipulate affected systems and potentially gain unauthorized access. This vulnerability poses a significant risk, particularly for those using versions up to 10.3. Organizations using these Sitecore products are strongly urged to apply the necessary patches to mitigate this threat. Failure to do so may result in serious data breaches and system compromises.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Sitecore Experience Platform
  • Sitecore Experience Manager

Affected Vendors

  • Sitecore Holding II A/S