CVE-2022-34324: Sage Xrt Business Exchange

High severity, CVSS 8.8. EPSS: 11.9% chance of exploitation in the next 30 days.

Multiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add Currencies, Payment Order, and Transfer History.

Affected products

• Sage Sage Xrt Business Exchange: version 12.4.302 only

Published 2023-01-01. Last modified 2026-06-17.