CVE-2025-1886

Sage 200 Spain <2025.35.000 - Info Disclosure

Title source: llm

Description

Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.

References (1)

Scores

EPSS 0.0013
EPSS Percentile 32.7%

Classification

CWE
CWE-522
Status draft

Timeline

Published Mar 07, 2025
Tracked Since Feb 18, 2026