Vulnerabilities CVE-2025-67805

CVE-2025-67805

Medium

Open

TLP:CLEAR

AI Analysis

No AI analysis yet.

Description

A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Cloud. It was forcibly disabled again in version 2025_06_003.

Details

CVSS Score: 5.9
EPSS Score ⓘ: 0.29%

21.3th percentile
CVSS Vector: CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
Confidence: 90%
Published: Apr 1, 2026
Last Modified: May 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.