X3 Security Vulnerabilities

CVE-2023-31867

Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.

CVE-2023-31868

Sage X3 version 12.14.0.50-0 is vulnerable to Cross Site Scripting (XSS). Some parts of the Web application are dynamically built using user's inputs. Yet, those inputs are not verified nor filtered by the application, so they mathed the expected format. Therefore, when HTML/JavaScript code is inje...