Vulnerability index

Browse CVEs

12 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Sage Frp 1000 HIGH 8.1
CVE-2024-48646

An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation. An att…

No fix yet
Fix from $1,950 2024-10-30
Sage Frp 1000 HIGH 7.2
CVE-2024-48647

A file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote attackers to retrieve arbitrary files from the server's …

No fix yet
Fix from $1,950 2024-10-30
Sage Frp 1000 MEDIUM 6.1
CVE-2024-48648

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0. This vulnerability allows attackers to inject malicious scripts…

No fix yet
Fix from $1,600 2024-10-30
Sage 200 Spain CRITICAL 9.8
CVE-2023-2809

Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQ…

Mitigation only
Fix from $2,300 2023-10-04
X3 HIGH 7.2
CVE-2023-31867

Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.

Mitigation only
Fix from $1,950 2023-06-22
X3 MEDIUM 5.4
CVE-2023-31868

Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web application are dynamically built using user's inputs…

Mitigation only
Fix from $1,600 2023-06-22
Sage Enterprise Intelligence CRITICAL 9.0
CVE-2022-34322

Multiple XSS issues were discovered in Sage Enterprise Intelligence 2021 R1.1 that allow an attacker to execute JavaScript code in the context of use…

No fix yet
Fix from $2,300 2023-01-01
Sage Xrt Business Exchange HIGH 8.8
CVE-2022-34324EPSS 12%

Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencie…

No fix yet
Fix from $1,950 2023-01-01
Sage Xrt Business Exchange MEDIUM 5.4
CVE-2022-34323

Multiple XSS issues were discovered in Sage XRT Business Exchange 12.4.302 that allow an attacker to execute JavaScript code in the context of other …

No fix yet
Fix from $1,600 2023-01-01
Easypay MEDIUM 5.4
CVE-2020-13893

Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or …

Mitigation only
Fix from $1,600 2020-10-18
Xrt Treasury HIGH 8.8
CVE-2017-3183

Sage XRT Treasury, version 3, fails to properly restrict database access to authorized users, which may enable any authenticated user to gain full ac…

Mitigation only
Fix from $1,950 2018-07-24
Sage MEDIUM 6.8
CVE-2006-4712

Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a c…

No fix yet
Fix from $1,600 2006-09-12