Medium severity5.9NVD Advisory· Published Apr 1, 2026· Updated May 10, 2026
CVE-2025-67805
CVE-2025-67805
Description
A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive information such as hashes and table names. This feature is disabled by default in all installations and never available in Sage DPW Cloud. It was forcibly disabled again in version 2025_06_003.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- pastebin.com/Tk4LgMG2nvdThird Party Advisory
- www.sagedpw.atnvdProduct
News mentions
0No linked articles in our index yet.