Vulnerabilities

TI-2024-32455 CVE-2024-48648 · GHSA-cvm9-cv4j-fhwp

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0.

LOW 27

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the Sage 1000 v 7.0.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00354 Published 2024-10-30 No fix listed CWE-79

TI-2024-32454 CVE-2024-48647 · GHSA-wrjh-x85j-vvg8

LOW 35

A file disclosure vulnerability exists in Sage 1000 v7.0.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00778 Published 2024-10-30 No fix listed CWE-552

TI-2024-32453 CVE-2024-48646 · GHSA-95v3-2xxf-g2hg

LOW 38

An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00533 Published 2024-10-30 No fix listed CWE-434

TI-2019-15193 CVE-2019-25053 · GHSA-66vg-fp7f-57vg

HIGH 72

A path traversal vulnerability exists in Sage FRP 1000 before November 2019.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2023-01-27 No fix listed CWE-22