CVE-2020-7388— Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-7388
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sage X3 AdxAdmin Unauthenticated Command Execution Bypass by Spoofing
Source: NVD (National Vulnerability Database)
Vulnerability Description
Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, that information can be learned by exploiting CVE-2020-7387. This issue was fixed in AdxAdmin 93.2.53, which ships with updates for on-premises versions of Sage X3 including Version 9 (components shipped with Syracuse 9.22.7.2 and later), Sage X3 HR & Payroll Version 9 (those components that ship with Syracuse 9.24.1.3), Version 11 (components shipped with Syracuse 11.25.2.6 and later), and Version 12 (components shipped with Syracuse 12.10.2.8 and later) of Sage X3. Other on-premises versions of Sage X3 are unsupported by the vendor.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用欺骗进行的认证绕过
Source: NVD (National Vulnerability Database)
Vulnerability Title
Sage Group Sage X3 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Sage Group Sage X3是Sage Group公司的一个应用软件。针对成熟企业开发的企业资源规划产品。 Sage X3存在安全漏洞，该 Metasploit 模块利用 Sage X3 AdxSrv 管理协议中的身份验证绕过漏洞，以系统身份对运行可用 AdxAdmin 服务的 Sage X3 服务器执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
II. Public POCs for CVE-2020-7388
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Proof of concept exploit code for CVE-2020-7388, an unauthenticated RCE as SYSTEM on Sage X3's AdxDSrv Service | https://github.com/ac3lives/sagex3-cve-2020-7388-poc | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-7388
请登录查看更多情报信息。
Same Patch Batch · Sage · 2021-07-22 · 4 CVEs total
| CVE-2020-7389 | 5.5 MEDIUM | Sage X3 Syracuse Missing Authentication for Critical Function in Developer Environment |
| CVE-2020-7387 | 5.3 MEDIUM | Sage X3 AdxAdmin Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2020-7390 | 4.6 MEDIUM | Sage X3 Syracuse Persistent XSS in Edit User page |
IV. Related Vulnerabilities
Same vendor: Sage
- CVE-2025-1887
SMB forced authentication vulnerability in Sage 200 Spain - CVE-2025-1886
Pass-Back vulnerability in Sage 200 Spain - CVE-2023-2809
Use of Cleartext credentials in Sage 200 Spain - CVE-2020-7390
Sage X3 Syracuse Persistent XSS in Edit User page - CVE-2020-7389
Sage X3 Syracuse Missing Authentication for Critical Functio
Same weakness: CWE-290
- CVE-2021-47923
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie - CVE-2026-42354
Sentry: Improper authentication on SAML SSO process allows u - CVE-2026-44118
OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Tok - CVE-2026-39858
Traefik: Forwarded alias spoofing top pre-auth decision bypa - CVE-2018-25317
Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness
V. Comments for CVE-2020-7388
No comments yet