1 matches found
Code injection
On versions of Sage 300 2017 - 2022 6.4.x - 6.9.x which are setup in a "Windows Peer-to-Peer Network" or "Client Server Network" configuration, a low-privileged Sage 300 workstation user could abuse their access to the "SharedData" folder on the connected Sage 300 server to view and/or modify the...
4.3CVSS7.8AI score0.00258EPSS
SaveExploits1References2Affected Software1
20