Sage vulnerabilities

Products

• 300 7
• X3 6
• Frp 1000 4
• Sage 3
• 200 Spain 3
• 1000 2
• Adxadmin 2
• Ar Automation 2
• Xrt Business Exchange 2
• Syracuse 2

Newest

• sage ar automation Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.... CVE-2026-68484 9.0 CriticalSeptember 9, 2026
• sage ar automation Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.... CVE-2026-67403 9.0 CriticalSeptember 9, 2026
• sage employee self service A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality... CVE-2026-67395 5.9 MediumSeptember 1, 2026
• sage 200 spain SMB forced authentication vulnerability in Sage 200 Spain CVE-2025-1887 7.1 HighMarch 7, 2025
• sage 200 spain Pass-Back vulnerability in Sage 200 Spain CVE-2025-1886 7.1 HighMarch 7, 2025
• sage frp 1000 A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0. This... CVE-2024-48648 6.1 MediumOctober 30, 2024
• sage 1000, frp 1000 +1 more A file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote... CVE-2024-48647 7.2 HighOctober 30, 2024
• sage 1000, frp 1000 +1 more An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized... CVE-2024-48646 8.1 HighOctober 30, 2024
• sage 200 spain Use of Cleartext credentials in Sage 200 Spain CVE-2023-2809 7.8 HighOctober 4, 2023
• sage x3 Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web... CVE-2023-31868 5.4 MediumJune 22, 2023
• sage x3 Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection. CVE-2023-31867 7.2 HighJune 22, 2023
• sage 300 Versions of Sage 300 through 2022 implement role-based access controls that are only enforced... CVE-2023-29927 4.3 MediumMay 16, 2023
• sage 300 Sage 300 through 2022 uses a hard-coded 40-byte blowfish key to encrypt and decrypt user... CVE-2022-41400 9.8 CriticalApril 28, 2023
• sage 300 The optional Web Screens feature for Sage 300 through version 2022 uses a hard-coded 40-byte... CVE-2022-41399 7.5 HighApril 28, 2023
• sage 300 The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded... CVE-2022-41398 7.5 HighApril 28, 2023
• sage 300 The optional Web Screens and Global Search features for Sage 300 through version 2022 use a hard... CVE-2022-41397 9.8 CriticalApril 28, 2023
• sage 300 On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a "Windows Peer-to-Peer... CVE-2022-38583 7.8 HighApril 28, 2023
• sage frp 1000 A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote... CVE-2019-25053 7.5 HighJanuary 27, 2023
• sage xrt business exchange Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to... CVE-2022-34324 EPSS 11.9% 8.8 HighJanuary 1, 2023
• sage xrt business exchange Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker... CVE-2022-34323 5.4 MediumJanuary 1, 2023
• sage enterprise intelligence Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an... CVE-2022-34322 9.0 CriticalJanuary 1, 2023
• sage 300 In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300... CVE-2021-45492 7.8 HighJuly 14, 2022
• sage syracuse, x3 +1 more Sage X3 Syracuse Persistent XSS in Edit User page CVE-2020-7390 4.6 MediumJuly 22, 2021
• sage syracuse, x3 +1 more Sage X3 Syracuse Missing Authentication for Critical Function in Developer Environment CVE-2020-7389 5.5 MediumJuly 22, 2021
• sage adxadmin, x3 +1 more Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing CVE-2020-7388 Public exploit EPSS 69.4% 10.0 CriticalJuly 22, 2021
• sage adxadmin, x3 +1 more Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor CVE-2020-7387 Public exploit EPSS 34.3% 5.3 MediumJuly 22, 2021
• sage easypay Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow... CVE-2020-13893 5.4 MediumOctober 18, 2020
• sage xrt treasury Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions CVE-2017-3183 8.8 HighJuly 24, 2018
• sage Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions... CVE-2007-0896 Public exploit 4.3 MediumFebruary 13, 2007
• sage Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to... CVE-2006-4712 6.8 MediumSeptember 12, 2006
• sage Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject... CVE-2006-4711 4.3 MediumSeptember 12, 2006