| Package | Affected versions | Patched versions |
|---|---|---|
| experience commerce | ≥ 9.0, ≤ 10.3 | |
| experience manager | ≥ 9.0, ≤ 10.3 | |
| experience platform | ≥ 9.0, ≤ 10.3 |
An issue in the MVC Device Simulator of Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) v9.0 Initial Release to v13.0 Initial Release allows attackers to bypass authorization rules.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free