The Patches for Sage CRM are now available and have been distributed to the Sage Regions.

• Sage CRM 2021 R2.4
• Sage CRM 2022 R2.3

Sage CRM contained several vulnerabilities discovered during penetration testing.

Note: Customers on either 2021 R1 or 2021 R1 can upgrade directly to 2021 R2.4 and Sage CRM 2022 R2.3 respectively.

These vulnerabilities are not found in Sage CRM 2023 R2.1.  A direct upgrade from 2023 R1 to Sage CRM 2023 R2.1 is supported.

https://communityhub.sage.com/sage-global-solutions/sage-crm/f/announcements/211445/advisory-sage-crm-2023-r2-1-patch-now-available-for-2023-r2

Please note that these patches apply to Sage CRM standalone and when integrated with Sage accounting products; Sage 50, Sage 100, Sage 200, Sage 1000, Sage 300, Sage X3 and Sage Intacct.

The Sage Regions will announce the appropriate download links shortly, and share the status of their application to integrated products.

In all cases, it’s our advice the patches are applied as soon as possible.