Browse CVEs

HIGH 7.5 CVE-2025-67805 A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposi… Sage Dpw Mitigation only Fix from $1,9502026-04-01 MEDIUM 5.3 CVE-2025-67806 The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in… Sage Dpw Mitigation only Fix from $1,6002026-04-01 MEDIUM 5.3 CVE-2025-51533 An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sending a cr… Sage Dpw 2025_06_000+ Fix from $1,6002025-08-07 HIGH 7.5 CVE-2025-51532 Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted requ… Sage Dpw 2025_06_000+ Fix from $1,9502025-08-06 MEDIUM 6.1 CVE-2025-51531 A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in the cont… Sage Dpw 2025_06_000+ Fix from $1,6002025-08-06 HIGH 8.1 CVE-2024-56883 Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the serv… Sage Dpw 2024_12_001+ Fix from $1,9502025-02-18 MEDIUM 5.4 CVE-2024-56882 Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role privileges can permanently stor… Sage Dpw 2024_12_000+ Fix from $1,6002025-02-18 MEDIUM 6.1 CVE-2020-26583 An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. It allows unauthenticated users to upload JavaScript (in a file) via the expenses c… Sage Dpw 2020_06_002+ Fix from $1,6002020-10-16 MEDIUM 6.1 CVE-2020-26584 An issue was discovered in Sage DPW 2020_06_x before 2020_06_002. The search field "Kurs suchen" on the page Kurskatalog is vulnerable to Reflected X… Sage Dpw 2020_06_002+ Fix from $1,6002020-10-16