PT-2025-32185 · Sage · Sage Dpw

Ferat Aydin · Published 2025-08-06 · Updated 2025-10-01 · CVE-2025-51532

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Sage DPW versions prior to 2024 12 004

Description Incorrect access control in Sage DPW allows unauthorized attackers to access the built-in Database Monitor via a crafted request.

Recommendations Update to version 2024 12 004 or later.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-51532

Affected Products

Sage Dpw

References · 8

• 🔥 https://sec4you-pentest.com/schwachstelle/sage-dpw-unauthentifizierter-zugriff-adminbereich-db-monitor · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51532 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51532 · Vendor Advisory
• https://sec4you-pentest.com/schwachstellen · Note
• https://twitter.com/VulmonFeeds/status/1953150171971199054 · Twitter Post
• https://twitter.com/CVEnew/status/1953129360409448710 · Twitter Post
• https://t.me/cveNotify/137110 · Telegram Post
• https://t.me/CVEtracker/29368 · Telegram Post