cve.bz

CVE-2020-7389

7.2 highEPSS 2.1%

High (7.2) in sage syracuse. EPSS 2.1% chance of exploitation in the next 30 days.

Sage X3 System CHAINE Variable Script Command Injection. An authenticated user with developer access can pass OS commands via this variable used by the web application. Note, this developer configuration should not be deployed in production.

Severity

CVSS 3.1

7.2 high
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWEs
CWE-78, CWE-306
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON