CVE-2025-67805

A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing…

Medium · published April 1, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Cloud. It was forcibly disabled again in version 2025_06_003.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AC:H/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.2th percentile
Published
2026-04-01T00:00Z
EPSS history
Timeline
  • 01 APR 00:00Z
    A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing…
    cvelistv5