CVE-2025-1886

Pass-Back vulnerability in Sage 200 Spain

State: Published
Severity: 7.1 High
Published: Mar 7, 2025
Updated: Mar 7, 2025
Reserved: Mar 3, 2025

Description

Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

Scores

CVSS	Score	Vector	Source
4.0	7.1 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	INCIBE

Weaknesses

CWE-522 Insufficiently Protected Credentials

Affected Products

Product	Versions
Sage 200 SpainSage	2025.35.000Affected

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-sage-200-spain

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.