Vulnerabilities in Sage
11 resultsCVE-2020-7388CRITICALSage X3 AdxAdmin Unauthenticated Command Execution Bypass by SpoofingEPSS 69.4%CVE-2020-7387MEDIUMSage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized ActorEPSS 34.3%CVE-2017-3183—Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functionsEPSS 2.1%CVE-2020-7389MEDIUMSage X3 Syracuse Missing Authentication for Critical Function in Developer EnvironmentEPSS 2.1%CVE-2026-67395MEDIUMA path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path paraEPSS 1.1%CVE-2020-7390MEDIUMSage X3 Syracuse Persistent XSS in Edit User pageEPSS 0.6%CVE-2023-2809HIGHUse of Cleartext credentials in Sage 200 SpainEPSS 0.4%CVE-2025-1887HIGHSMB forced authentication vulnerability in Sage 200 SpainEPSS 0.4%CVE-2025-1886HIGHPass-Back vulnerability in Sage 200 SpainEPSS 0.3%CVE-2026-67403CRITICALCash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks EPSS 0.3%CVE-2026-68484CRITICALCash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verifyEPSS 0.3%