CVE-2022-41398: Sage 300

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The optional Global Search feature for Sage 300 through version 2022 uses a set of hard-coded credentials for the accompanying Apache Solr instance. This issue could allow attackers to login to the Solr dashboard with admin privileges and access sensitive information.

Affected products

• Sage Sage 300: up to and including 2022

Published 2023-04-28. Last modified 2026-06-17.