Sage

Records31All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

Sage records in CISA KEV

No Sage vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Syracuse · all components

TI-2020-05971 CVE-2020-7389 · GHSA-639w-2r2j-2x43

LOW 36

Sage X3 System CHAINE Variable Script Command Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02071 Published 2021-07-22 Fixed in Syracuse 9.22.7.2, Syracuse 11.25.2.6 +1 CWE-306

TI-2020-05972 CVE-2020-7390 · GHSA-w447-836c-qj8m

LOW 25

Sage X3 Stored XSS Vulnerability on ‘Edit’ Page of User Profile.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00597 Published 2021-07-22 Fixed in Syracuse 12.10.0 CWE-79