This is a notification for product news or an alert. If you have a question, please start a new discussion

ALERT : Syracuse Server (Security hotfix for 2023 R2)

This Security Syracuse Server release fixes vulnerabilities discovered in SyracuseServer 12.19.0.

The security risk does not affect the previous version of Syracuse. Please replace SyracuseServer 12.19.0 with SyracuseServer

SyracuseServer fixes two specific risks that have been identified: 

  • JavaScript Vulnerability
  • Host management for the “Reset password” link: The hostname management for the “Reset password” feature has been reinforced with a hostname allowlist to protect from hostname hijacking. Allowed host names must be specified in the allowlist in Administration > Global Settings for the reset password URLs to be accepted by Sage X3. (Documentation for this feature will be available soon)
  • This hotfix also addresses a translation issue with the French language on login. 

Link to download from the Sage X3 FTP Site. 

File name -

Following the Sage X3 Security Best Practices reduces security risks. However, we strongly advise you to apply all security patches issued by Sage.