Skip to content
Noroxi

sagedpw records

10 published records for vendor sagedpw.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
20%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 20
  2. 25
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2024-56883
    32Monitor

    Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control.

    HighCVSS 8.1Proof of conceptEPSS 0%

    sagedpw · sage dpwFeb 18, 2025

  • CVE-2025-51532
    30Monitor

    Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a cra

    HighCVSS 7.5No exploitEPSS 0%

    sagedpw · sage dpwAug 6, 2025

  • CVE-2025-67805
    30Monitor

    A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor featur

    HighCVSS 7.5No exploitEPSS 0%

    sagedpw · sage dpwApr 1, 2026

  • CVE-2020-26583
    24Monitor

    An issue was discovered in Sage DPW 2020_06_x before 2020_06_002.

    MediumCVSS 6.1No exploitEPSS 1%

    sagedpw · sage dpwOct 16, 2020

  • CVE-2020-26584
    24Monitor

    An issue was discovered in Sage DPW 2020_06_x before 2020_06_002.

    MediumCVSS 6.1No exploitEPSS 0%

    sagedpw · sage dpwOct 16, 2020

  • CVE-2025-51531
    24Monitor

    A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in

    MediumCVSS 6.1No exploitEPSS 0%

    sagedpw · sage dpwAug 6, 2025

  • CVE-2024-56882
    21Monitor

    Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 5.4Proof of conceptEPSS 0%

    sagedpw · sage dpwFeb 18, 2025

  • CVE-2025-51533
    21Monitor

    An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sen

    MediumCVSS 5.3No exploitEPSS 0%

    sagedpw · sage dpwAug 7, 2025

  • CVE-2025-67806
    21Monitor

    The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac

    MediumCVSS 5.3No exploitEPSS 0%

    sagedpw · sage dpwApr 1, 2026

  • CVE-2025-67807
    18Monitor

    The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac

    MediumCVSS 4.7No exploitEPSS 0%

    sagedpw · sage dpwApr 1, 2026