Sage vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20214
3. 20231
4. 20252
5. 20263

Newest CVEs

• CVE-2026-68484

  Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges,…

  Sage · Sage AR Automation

  Critical9.0
• CVE-2026-67403

  Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated…

  Sage · Sage AR Automation

  Critical9.0
• CVE-2026-67395

  A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By…

  Sage · Employee Self Service

  Medium5.9
• CVE-2025-1887

  SMB forced authentication vulnerability in Sage 200 Spain

  Sage · Sage 200 Spain

  High7.1
• CVE-2025-1886

  Pass-Back vulnerability in Sage 200 Spain

  Sage · Sage 200 Spain

  High7.1
• CVE-2023-2809

  Use of Cleartext credentials in Sage 200 Spain

  Sage · Sage 200 Spain

  High7.8
• CVE-2020-7390

  Sage X3 Syracuse Persistent XSS in Edit User page

  Sage · X3

  Medium4.6
• CVE-2020-7389

  Sage X3 Syracuse Missing Authentication for Critical Function in Developer Environment

  Sage · X3

  Medium5.5
• CVE-2020-7388

  Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing

  Sage · X3

  Critical10.0
• CVE-2020-7387

  Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor

  Sage · X3

  Medium5.3