NetSight
critical9.8

CVE-2023-35813

Multiple Sitecore products allow remote code execution.

Impact

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.

Affected products

VendorProductAffected versions
SitecoreExperience Commerce
from 8.2 through 10.3
SitecoreExperience Manager
from 8.2 through 10.3
SitecoreExperience Platform
from 8.2 through 10.3
SitecoreManaged Cloud
from 8.2 through 10.3

Weakness classification

References