CVE Catalog
CVE-2023-35813
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk85.50%
100th percentile - higher than 100% of all known CVEs
Summary
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access and full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to the latest version of Sitecore products to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.