Sage Ar Automation
Approved changes feed: RSS · Atom
cpe:2.3:a:sage:sage_ar_automation:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sage (c8b89926-672a-55fd-8b90-8159b08c65cc) |
|---|---|
| Product | Sage Ar Automation (4ae34fa8-e7e7-54d8-b11f-f970956fb6e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-68484 |
vulnerable | 2026-09-16 04:34:00.104993 |
Details available
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges.
Published: 2026-09-09T15:49:40.369Z
Updated: 2026-09-09T19:03:29.974Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-67403 |
vulnerable | 2026-09-16 04:33:05.936582 |
Details available
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier.
Published: 2026-09-09T15:49:40.322Z
Updated: 2026-09-09T19:07:40.225Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.