Skip to content
OpenAdvisories

Vendor

Sage

11 known vulnerabilities.

Products

X3 4 Sage 200 Spain 3 Sage AR Automation 2 Employee Self Service 1 XRT Treasury 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2025-1887

    SMB forced authentication vulnerability in Sage 200 Spain

    SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a se…

    Sage Sage 200 Spain
  • High 7.1
    CVE-2025-1886

    Pass-Back vulnerability in Sage 200 Spain

    Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

    Sage Sage 200 Spain
  • High 7.8
    CVE-2023-2809

    Use of Cleartext credentials in Sage 200 Spain

    Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obt…

    Sage Sage 200 Spain