Sage 200 Spain vulnerabilities

3 known vulnerabilities in Sage 200 Spain from Sage. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Sage 200 Spain: Authentication Bypass by Capture-replay

  CVE-2025-1887Mar 7, 2025Sage

  SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a ser

• 7.1 High severity

  Sage 200 Spain: Insufficiently Protected Credentials

  CVE-2025-1886Mar 7, 2025Sage

  Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

• 9.8 Critical severity

  Sage 200 Spain: Cleartext Storage of Sensitive Information

  CVE-2023-2809Oct 4, 2023Sage

  Plaintext credential usage vulnerability in Sage 200 Spain 2023.38.001 version, the exploitation of which could allow a remote attacker to extract SQL database credentials from the DLL application. This vulnerability could be linked to known techniques to obta