https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:25:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-334640 EUVD-2026-334640 https://cve.radiocsirt.org/vuln/euvd-2026-334640 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38583 <p>On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a &#34;Windows Peer-to-Peer Network&#34; or &#34;Client Server Network&#34; configuration, a low-privileged Sage 300 workstation user could abuse their access to the &#34;SharedData&#34; folder on the connected Sage 300 server to view and/or modify the credentials associated with Sage 300 users and SQL accounts to impersonate users and/or access the SQL database as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be possible to create, update, and delete all records associated with the program and, depending on the configuration, execute code on the underlying database server.</p> <p>On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a &#34;Windows Peer-to-Peer Network&#34; or &#34;Client Server Network&#34; configuration, a low-privileged Sage 300 workstation user could abuse their access to the &#34;SharedData&#34; folder on the connected Sage 300 server to view and/or modify the credentials associated with Sage 300 users and SQL accounts to impersonate users and/or access the SQL database as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be possible to create, update, and delete all records associated with the program and, depending on the configuration, execute code on the underlying database server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38583 https://cve.radiocsirt.org/vuln/ghsa-vc8j-g69q-pqfg <p>On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a &#34;Windows Peer-to-Peer Network&#34; or &#34;Client Server Network&#34; configuration, a low-privileged Sage 300 workstation user could abuse their access to the &#34;SharedData&#34; folder on the connected Sage 300 server to view and/or modify the credentials associated with Sage 300 users and SQL accounts to impersonate users and/or access the SQL database as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be possible to create, update, and delete all records associated with the program and, depending on the configuration, execute code on the underlying database server.</p> <p>On versions of Sage 300 2017 - 2022 (6.4.x - 6.9.x) which are setup in a &#34;Windows Peer-to-Peer Network&#34; or &#34;Client Server Network&#34; configuration, a low-privileged Sage 300 workstation user could abuse their access to the &#34;SharedData&#34; folder on the connected Sage 300 server to view and/or modify the credentials associated with Sage 300 users and SQL accounts to impersonate users and/or access the SQL database as a system administrator. With system administrator-level access to the Sage 300 MS SQL database it would be possible to create, update, and delete all records associated with the program and, depending on the configuration, execute code on the underlying database server.</p> https://cve.radiocsirt.org/vuln/ghsa-vc8j-g69q-pqfg https://cve.radiocsirt.org/vuln/gsd-2022-38583 gsd-2022-38583 https://cve.radiocsirt.org/vuln/gsd-2022-38583