Vulnerabilities in Sage
8 resultsCVE-2020-7388CRITICALSage X3 AdxAdmin Unauthenticated Command Execution Bypass by SpoofingEPSS 70.3%CVE-2020-7387MEDIUMSage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized ActorEPSS 35.8%CVE-2017-3183—Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functionsEPSS 2.1%CVE-2020-7389MEDIUMSage X3 Syracuse Missing Authentication for Critical Function in Developer EnvironmentEPSS 2.1%CVE-2020-7390MEDIUMSage X3 Syracuse Persistent XSS in Edit User pageEPSS 0.6%CVE-2023-2809HIGHUse of Cleartext credentials in Sage 200 SpainEPSS 0.4%CVE-2025-1887HIGHSMB forced authentication vulnerability in Sage 200 SpainEPSS 0.3%CVE-2025-1886HIGHPass-Back vulnerability in Sage 200 SpainEPSS 0.3%