CVE-2025-51533

概要

参考情報

• sec4you-pentest.com/schwachstelle/sage-dpw-vorhersehbare-url-ids-ermoeglichen-unautorisierten-zugriff-auf-interne-formulare · Exploit
• sec4you-pentest.com/schwachstellen · Third Party Advisory

sage dpw のその他の脆弱性

• CVE-2025-67807中 4.7The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac…
• CVE-2025-67806中 5.3The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing ac…
• CVE-2025-67805高 7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor featur…
• CVE-2025-51532高 7.5Incorrect access control in Sage DPW 2024_12_004 and earlier allows unauthorized attackers to access the built-in Database Monitor via a cra…
• CVE-2025-51531中 6.1A reflected cross-site scripting (XSS) vulnerability in Sage DPW 2024_12_004 and earlier allows attackers to execute arbitrary JavaScript in…