Sage

Records31All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Sage records in CISA KEV

No Sage vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Sage Frp 1000 · all components

TI-2019-15193 CVE-2019-25053 · GHSA-66vg-fp7f-57vg

HIGH 72

A path traversal vulnerability exists in Sage FRP 1000 before November 2019.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2023-01-27 No fix listed CWE-22

TI-2024-32453 CVE-2024-48646 · GHSA-95v3-2xxf-g2hg

LOW 38

An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00533 Published 2024-10-30 No fix listed CWE-434

TI-2024-32454 CVE-2024-48647 · GHSA-wrjh-x85j-vvg8

LOW 35

A file disclosure vulnerability exists in Sage 1000 v7.0.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00778 Published 2024-10-30 No fix listed CWE-552

TI-2024-32455 CVE-2024-48648 · GHSA-cvm9-cv4j-fhwp

LOW 27

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00354 Published 2024-10-30 No fix listed CWE-79