İçeriğe atla
Noroxi

sagedpw kayıtları

sagedpw üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%20
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 25
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

10 kayıt
  • CVE-2024-56883
    32İzleyin

    Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    sagedpw · sage dpw18 Şub 2025

  • CVE-2025-51532
    30İzleyin

    Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a cra

    YüksekCVSS 7,5İstismar yokEPSS %0

    sagedpw · sage dpw6 Ağu 2025

  • CVE-2025-67805
    30İzleyin

    A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor featur

    YüksekCVSS 7,5İstismar yokEPSS %0

    sagedpw · sage dpw1 Nis 2026

  • CVE-2020-26583
    24İzleyin

    An issue was discovered in Sage DPW 2020_06_x before 2020_06_002.

    OrtaCVSS 6,1İstismar yokEPSS %1

    sagedpw · sage dpw16 Eki 2020

  • CVE-2020-26584
    24İzleyin

    An issue was discovered in Sage DPW 2020_06_x before 2020_06_002.

    OrtaCVSS 6,1İstismar yokEPSS %0

    sagedpw · sage dpw16 Eki 2020

  • CVE-2025-51531
    24İzleyin

    A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in

    OrtaCVSS 6,1İstismar yokEPSS %0

    sagedpw · sage dpw6 Ağu 2025

  • CVE-2024-56882
    21İzleyin

    Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    sagedpw · sage dpw18 Şub 2025

  • CVE-2025-51533
    21İzleyin

    An Insecure Direct Object Reference (IDOR) in Sage DPW v2024_12_004 and below allows unauthorized attackers to access internal forms via sen

    OrtaCVSS 5,3İstismar yokEPSS %0

    sagedpw · sage dpw7 Ağu 2025

  • CVE-2025-67806
    21İzleyin

    The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac

    OrtaCVSS 5,3İstismar yokEPSS %0

    sagedpw · sage dpw1 Nis 2026

  • CVE-2025-67807
    18İzleyin

    The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac

    OrtaCVSS 4,7İstismar yokEPSS %0

    sagedpw · sage dpw1 Nis 2026