Sagedpw vulnerabilities
We track 3 vulnerabilities in Sagedpw products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 1, 2026.
Latest Sagedpw vulnerabilities
- 7.5 High severity
Sage Dpw: Missing Authentication for Critical Functionality
A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installatio
- 7.5 High severity
Sage Dpw: Improper Access Control
Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a crafted request. The vendor has stated that the issue is fixed in 2025_06_000, released in June 2025.
- 8.1 High severity
Sage Dpw: Improper Access Control
Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employee