Sage

www.sage.com ↗ 📈 LON:SGE
C
CAUTION
13
Total CVEs
1
Crit / High
2
Medium
27%
Unpatched
0%
Patched
5.6
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
27%
Under Review
27%
Pending
47%
✓ 0 patched ✗ 4 unpatched ~ 4 under review ⏳ 7 pending score
▸ Stock — LON:SGE Yahoo Finance ↗

No data — run stock_fetcher.py first

▸ Intelligence by Audience
PoC Available
9 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"sage" port:443
org:"Sage" http.status:200
Top EPSS (Exploitation Probability)
CVE-2020-7388 69.44% exploitation probability
CVE-2024-56883 0.70% exploitation probability
CVE-2024-48647 0.48% exploitation probability
CVE-2024-56882 0.44% exploitation probability
CVE-2023-2809 0.40% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
13
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
27%
Avg CVSS score
5.6
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-06-14
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
AI is producing exploits faster than we can patch - Federal News Network
Federal News Network 2026-02-23
83 Cybersecurity Statistics 2026 (Worldwide Data & Trends) - DemandSage
DemandSage 2025-12-31
Critical Flaws Reported in Sage X3 Enterprise Management Software - The Hacker News
The Hacker News 2021-07-08
SAGE Cyber Launches CISO Planning Tool - Dark Reading
Dark Reading 2024-05-21
CVE-2020-7387.7390: Multiple Sage X3 Vulnerabilities - Rapid7
Rapid7 2021-07-07
Multiple Sage X3 vulnerabilities expose systems to hack - Security Affairs
Security Affairs 2021-07-08
▸ Recent CVEs showing 20 of 15
CVE IDSeverityPatchEPSSDate
CVE-2025-67806 3.7 LOW UNKNOWN / UNPATCHED 0.01% 2026-04-01
CVE-2025-67807 PoC ? N/A UNKNOWN / UNPATCHED 0.04% 2026-04-01
CVE-2025-67805 5.9 MEDIUM UNKNOWN / UNPATCHED 0.02% 2026-04-01
CVE-2025-51533 PoC 5.3 MEDIUM UNKNOWN / UNPATCHED 0.26% 2025-08-07
CVE-2025-51532 PoC 7.5 HIGH UNKNOWN / UNPATCHED 0.31% 2025-08-06
CVE-2025-51531 PoC ? N/A UNKNOWN / UNPATCHED 0.18% 2025-08-06
CVE-2025-1887 7.1 HIGH PATCH UNDER REVIEW 0.36% 2025-03-07
CVE-2025-1886 7.1 HIGH PATCH UNDER REVIEW 0.32% 2025-03-07
CVE-2024-56883 ? N/A UNKNOWN / UNPATCHED 0.70% 2025-02-18
CVE-2024-56882 PoC ? N/A UNKNOWN / UNPATCHED 0.44% 2025-02-18
CVE-2024-48648 PoC ? N/A UNKNOWN / UNPATCHED 0.10% 2024-10-30
CVE-2024-48647 PoC ? N/A UNKNOWN / UNPATCHED 0.48% 2024-10-30
CVE-2024-48646 PoC ? N/A UNKNOWN / UNPATCHED 0.10% 2024-10-30
CVE-2023-2809 7.8 HIGH PATCH UNDER REVIEW 0.40% 2023-10-04
CVE-2020-7388 PoC 10.0 CRITICAL PATCH UNDER REVIEW 69.44% 2021-07-22
View all 15 CVEs for Sage →
▸Intel
HQNewcastle upon Tyne, United Kingdom
Founded1981
Employees11,000
CEOSteve Hare
Ticker LON:SGE ↗
Trust ScoreC — CAUTION
Max CVSS7.5
Last Updated2026-06-14
▸Top Weaknesses
CWE-284
Improper Access Control
2 occurrences in Sage CVEs (15% of total)
CWE-284 ⓘ
2
CWE-79
Cross-Site Scripting (XSS)
2 occurrences in Sage CVEs (15% of total)
CWE-79 ⓘ
2
CWE-204
Unknown Weakness Type
2 occurrences in Sage CVEs (15% of total)
CWE-204 ⓘ
2
CWE-200
Sensitive Information Exposure
2 occurrences in Sage CVEs (15% of total)
CWE-200 ⓘ
2
CWE-639
Unknown Weakness Type
1 occurrence in Sage CVEs (8% of total)
CWE-639 ⓘ
1
CWE-434
Unrestricted File Upload
1 occurrence in Sage CVEs (8% of total)
CWE-434 ⓘ
1
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Unknown Weakness Type
1 occurrence in Sage CVEs (8% of total)
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) ⓘ
1
CWE-522 (Insufficiently Protected Credentials)
Unknown Weakness Type
1 occurrence in Sage CVEs (8% of total)
CWE-522 (Insufficiently Protected Credentials) ⓘ
1
▸Company Profile

Sage Group plc is a British multinational enterprise software company specializing in accounting, payroll, and payment solutions for small and medium-sized businesses. Its main products include Sage 50, Sage 100, Sage 300, Sage X3, and Sage Intacct, which are widely used in finance and operations. The company's software is significant in cybersecurity due to its handling of sensitive financial data, making it a target for vulnerabilities and attacks.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -57% better
CVE count 2026 vs 2025:  7 → 3 CVEs
Patch Speed ⓘ Poor (>65% open)
27% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Sage C valtersit.com