- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Severity across 11 analyzed records
As of 09/11/2026, Sage recorded 3 security vulnerabilities in the last 90 days across 2 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Sage AR Automation had the most security vulnerabilities in the Sage ecosystem, with 2 vulnerabilities—approximately 66.67% of the provider's total vulnerabilities during this period.
| CVE | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-68484CVE-2026-68484 | Exploitation statusNot known exploited | FixYes | Affected productSage AR Automation | Published09/09/2026 | SeverityCritical |
CVE-2026-67403CVE-2026-67403 | Exploitation statusNot known exploited | FixYes | Affected productSage AR Automation | Published09/09/2026 | SeverityCritical |
CVE-2026-67395CVE-2026-67395 | Exploitation statusNot known exploited | FixYes | Affected productEmployee Self Service | Published09/01/2026 | SeverityMedium |
CVE-2025-1887SMB forced authentication vulnerability in Sage 200 Spain | Exploitation statusNot known exploited | FixYes | Affected productSage 200 Spain | Published03/07/2025 | SeverityHigh |
CVE-2025-1886Pass-Back vulnerability in Sage 200 Spain | Exploitation statusNot known exploited | FixYes | Affected productSage 200 Spain | Published03/07/2025 | SeverityHigh |
CVE-2024-48646CVE-2024-48646 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/30/2024 | SeverityHigh |
CVE-2024-48648CVE-2024-48648 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/30/2024 | SeverityMedium |
CVE-2024-48647CVE-2024-48647 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published10/30/2024 | SeverityHigh |
CVE-2023-2809Use of Cleartext credentials in Sage 200 Spain | Exploitation statusNot confirmed | FixYes | Affected productSage 200 Spain | Published10/04/2023 | SeverityHigh |
CVE-2023-31867CVE-2023-31867 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published06/22/2023 | SeverityUnknown |
CVE-2023-31868CVE-2023-31868 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published06/22/2023 | SeverityUnknown |
CVE-2023-29927CVE-2023-29927 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published05/16/2023 | SeverityMedium |
CVE-2022-41400CVE-2022-41400 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/28/2023 | SeverityCritical |
CVE-2022-41397CVE-2022-41397 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/28/2023 | SeverityCritical |
CVE-2022-38583CVE-2022-38583 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published04/28/2023 | SeverityHigh |
CVE-2022-41399CVE-2022-41399 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/28/2023 | SeverityHigh |
CVE-2022-41398CVE-2022-41398 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published04/28/2023 | SeverityHigh |
CVE-2019-25053CVE-2019-25053 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/27/2023 | SeverityHigh |
CVE-2022-34322CVE-2022-34322 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/01/2023 | SeverityCritical |
CVE-2022-34324CVE-2022-34324 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/01/2023 | SeverityHigh |
CVE-2022-34323CVE-2022-34323 | Exploitation statusPublic exploit | FixNot confirmed | Affected productNot confirmed | Published01/01/2023 | SeverityMedium |
CVE-2021-45492CVE-2021-45492 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/14/2022 | SeverityUnknown |
CVE-2020-7390Sage X3 Syracuse Persistent XSS in Edit User page | Exploitation statusNot confirmed | FixYes | Affected productX3 | Published07/22/2021 | SeverityMedium |
CVE-2020-7389Sage X3 Syracuse Missing Authentication for Critical Function in Developer Environment | Exploitation statusNot confirmed | FixYes | Affected productX3 | Published07/22/2021 | SeverityMedium |
CVE-2020-7388Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing | Exploitation statusNot confirmed | FixYes | Affected productX3 | Published07/22/2021 | SeverityCritical |
CVE-2020-7387Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor | Exploitation statusNot confirmed | FixYes | Affected productX3 | Published07/22/2021 | SeverityMedium |
CVE-2020-13893CVE-2020-13893 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published10/18/2020 | SeverityUnknown |
CVE-2017-3183Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full access to privileged database functions | Exploitation statusNot confirmed | FixYes | Affected productXRT Treasury | Published07/24/2018 | SeverityUnknown |
CVE-2007-0896CVE-2007-0896 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published02/13/2007 | SeverityUnknown |
CVE-2006-4712CVE-2006-4712 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/12/2006 | SeverityUnknown |
CVE-2006-4711CVE-2006-4711 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published09/12/2006 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan