The security of our products and customer data is a top priority for Sage. This means from time to time we must make changes to how our technology works to make sure it is operating effectively. Following investigations into Sage CRM, some limited security risks were identified and as a result we have made some enhancements to the product.

Please note, that there is no evidence to show that unauthorised access to the software has taken place; the vulnerabilities were identified during pre-emptive testing.

A dedicated team of Sage security and software experts have developed a permanent solution to the issue identified, which is now available to customers on Sage CRM 2022 R2.5, 2023 R2.3 and 2024 R1.

What you need to do

We strongly advise customers who are not on Sage CRM 2024 R1 to upgrade to a version that has the fixes available.

• If you are using version 2022, we advise you to upgrade to 2022 R2.5.
• If you are using version 2023, we advise you to upgrade to 2023 R2.3.

If you are using any previous version, we advise you to upgrade to the latest available build which is 2024 R1.

Please note that these upgrades apply to Sage CRM standalone and when integrated with Sage accounting products; Sage 50, Sage 100, Sage 200, Sage 1000, Sage 300, Sage X3, and Sage Intacct.

For more information

Customers can reach out to their Partner Account Manager for more information or can contact our Customer Support Team.