CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-35813
Critical (9.8) in sitecore. EPSS 87% chance of exploitation in the next 30 days.
Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.
Severity
- EPSS
- 87% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sitecore:experience_commerce
- sitecore:experience_manager
- sitecore:experience_platform
- sitecore:managed_cloud