PT-2025-10084 · Sage · Sage 200 Spain

Pedro José Navas Pérez · Published 2025-03-07 · Updated 2025-03-08 · CVE-2025-1886

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Sage 200 Spain versions prior to 2025.35.000

Description The issue allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

Recommendations For versions prior to 2025.35.000, update to version 2025.35.000 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-1886

Affected Products

Sage 200 Spain

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-1886 · Security Note
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain · Note
• https://t.me/latest_high_impact_cve/1932 · Telegram Post
• https://t.me/cvedetector/19825 · Telegram Post
• https://t.me/cvenotify/113810 · Telegram Post
• https://twitter.com/CVEnew/status/1898246376728736185 · Twitter Post
• https://t.me/cvetracker/18674 · Telegram Post