Admins of on-premises Sage X3 ERP deployments should check they’re not exposing the enterprise resource planning suite to the public internet in case they fall victim to an unauthenticated command execution vulnerability. And said administrators should have installed by now the latest patches for the software, which address a bunch of bugs earlier discovered and reported by Rapid7.

Read full article on The Register