Vulnerability · Published Mar 7, 2025 · Assigned by INCIBE
CVE-2025-1886Pass-Back vulnerability in Sage 200 Spain
High 7.1
In plain English
A high-severity security flaw in Sage 200 Spain from Sage. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 4.0)7.1High
Exploit odds (30 days)0.3%top 74.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sage | Sage 200 Spain | 2025.35.000 |
Weakness: CWE-522 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N