Sage 200 Spain Security Vulnerabilities and Issues — Sage 200 Spain CVE List

Lucene search

SageSage 200 Spain

3 matches found

CVE•added 2025/03/07 11:15 a.m.•64 views

CVE-2025-1886

Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

7.1CVSS6.6AI score0.00063EPSS

CVE•added 2025/03/07 11:15 a.m.•50 views

CVE-2025-1887

SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.

7.1CVSS6.9AI score0.00089EPSS

CVE•added 2023/10/04 11:15 a.m.•37 views

CVE-2023-2809

Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obtain remote execution of MS SQL commands ...

9.8CVSS9.2AI score0.00149EPSS