Critical severity9.8NVD Advisory· Published Jun 17, 2023· Updated Jun 17, 2026

CVE-2023-35813

Description

Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3.

Sitecore/Experience Commerce
cpe:2.3:a:sitecore:experience_commerce:*:*:*:*:*:*:*:*
Range: >=8.2,<=10.3
Sitecore/Experience Manager
cpe:2.3:a:sitecore:experience_manager:*:*:*:*:*:*:*:*
Range: >=8.2,<=10.3
Sitecore/Experience Platform (XP)2 versions
cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sitecore:experience_platform:*:*:*:*:*:*:*:*range: >=8.2,<=10.3
- (no CPE)range: <=10.3
Sitecore/Managed Cloud
cpe:2.3:a:sitecore:managed_cloud:*:*:*:*:*:*:*:*
Range: >=8.2,<=10.3
Sitecore/Sitecore Experience Manager (XM)cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=10.3
Sitecore/Experience Commerce (XC)llm-fuzzy
Range: <=10.3