Sitecore Experience Manager, Platform, Commerce, and Managed Cloud Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud. This vulnerability allows for unauthorized access to information and affects all Experience Platform topologies from version 9.2 Initial Release through 10.4 Initial Release. PaaS and containerized solutions are also impacted.

Impact

Exploitation of this vulnerability could lead to remote code execution and unauthorized access to information.

Remediation

Sitecore users are advised to apply the available security fixes to their instances. For Managed Cloud customers, follow the documented procedures for patch application. Managed Cloud Premium customers can contact their Solutions Engineer for support with patch installation.