Skip to content
OpenAdvisories

Vendor

Sage

11 known vulnerabilities.

Products

X3 4 Sage 200 Spain 3 Sage AR Automation 2 Employee Self Service 1 XRT Treasury 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2020-7388 Public exploit EPSS 69%

    Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing

    Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, …

    Sage X3
  • Medium 5.3
    CVE-2020-7387 Public exploit EPSS 34%

    Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor

    Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-7388 to achieve full R…

    Sage X3