CVE-2023-33651
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules.
| Software | From | Fixed in |
|---|---|---|
| sitecore / experience_commerce | 9.0 | 10.3.x |
| sitecore / experience_manager | 9.0 | 10.3.x |
| sitecore / experience_platform | 9.0 | 10.3.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime