Announcements - Recent Threads

Advisory: Sage CRM – Apache Tika Vulnerability in QuickFind (CVE-2025-54988 / CVE-2025-66516)

Seema Singla — Wed, 15 Jul 2026 15:03:33 GMT

Overview

Sage CRM Quick Find uses Apache Solr, which bundles Apache Tika (tika-core) for content extraction from indexed documents, including PDFs. A vulnerability has been identified in the Apache Tika components.

This advisory explains the vulnerability, affected versions, impact, and current workaround.

What is happening?

A vulnerability has been identified relating to CVE-2025-54988 / CVE-2025-66516, affecting the following Apache Tika modules:

tika-core (versions 1.13–3.2.1)

tika-pdf-module (versions 2.0.0–3.2.1)

tika-parsers (versions 1.13–1.28.5)

These CVEs identify an XML External Entity (XXE) injection vulnerability that can be triggered via a crafted XFA (XML Forms Architecture) file embedded inside a PDF, on all platforms.

Sage CRM 2026R1 ships with tika-core-1.28.4.jar, which falls within the affected version range.

References

CVE-2025-54988: nvd.nist.gov/.../CVE-2025-54988

CVE-2025-66516: nvd.nist.gov/.../CVE-2025-66516

Recommendation

The following manual steps mitigate the vulnerability by disabling document content extraction in QuickFind:

Stop the QuickFind service.
Navigate to: <Your CRM folder>\Services\QuickFind\server\solr\configsets\sample_techproducts_configs\conf\solrconfig.xml
- Comment out the <requestHandler name="/update/extract" ... class="solr.extraction.ExtractingRequestHandler">  block and its contents.

Repeat the same change in: <Your CRM folder>\Services\QuickFind\templates\instance\conf\solrconfig.xml

Comment out the corresponding requestHandler

Navigate to: <Your CRM folder>\Services\QuickFind\contrib\extraction\lib

Locate the Tika-related JAR files (approximately 6–8 files, depending on version) and delete them.

Perform an IIS reset, verify if theQuickfind service has started successfully. In case it doesn't, start the service manually.
Log in to CRM and confirm QuickFind search functionality is working as expected.

Apply the workaround above on all CRM instances currently on affected Tika versions.

This issue has been addressed in upcoming Sage CRM 2026R2 release.

More Information

Sage CRM doesn't use document indexing. The vulnerable JAR files are still sitting statically inside the webapps directory (...\tomcat\webapps\solr\WEB-INF\lib\tika-core-1.28.4.jar). If an attacker gains enough local or network access to interact with the Solr instance directly via its default port (typically internal port 8983), they could potentially target the Solr ExtractingRequestHandler endpoint directly.

Advisory: Sage CRM – Exchange Integration Failure After Microsoft Exchange Password Change

Jobin Joseph John — Fri, 12 Jun 2026 21:48:18 GMT

Overview

Sage CRM Exchange Integration allows users to synchronise calendar data between Microsoft Exchange and Sage CRM. Authentication is performed per user via the Preferences → Switch Email Account section using their email address and Exchange credentials.

An issue has been identified where a password change for a single Exchange user, without re-authentication in Sage CRM, can cause Exchange integration to fail for all users enabled for synchronisation.

This advisory explains the behaviour, impact, root cause, and current workaround.

What is happening?

When Exchange Integration is enabled each user authenticates their Exchange mailbox in Sage CRM via the preferences tab and Synchronisation works correctly for all authenticated users.

However, if a user changes their Exchange password, and does not re-authenticate via the Preferences tab then Exchange integration may fail for all users configured for synchronisation, not just the affected user.

Cause

This behaviour is caused by invalidated authentication tokens in Microsoft Entra ID (Azure Active Directory).

When a user changes or resets their Exchange password previously issued OAuth tokens become invalid and Microsoft Entra ID revokes the authentication grant

The following error is observed in current_crm log:

java.util.concurrent.CompletionException: com.microsoft.aad.msal4j.MsalInteractionRequiredException: AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed. The user might have changed or reset their password. The grant was issued on 'xxxx-xx-xxTxx:xx:xx.6178840Z' and the TokensValidFrom date (before which tokens are not valid) for this user is 'xxxx-xx-xxTxx:xx:xx.0000000Z'.

Current Workaround

At present, the following manual steps are required to restore Exchange integration:

Identify users who have recently changed their Microsoft Exchange password.
Request affected users to log in to Sage CRM and reauthenticate via the preferences tab or exclude the user from synchronization.
Confirm that synchronisation resumes successfully for all users after enabling sync.

Recommendation

To minimise disruption:

Ensure users are informed that any Microsoft Exchange password change requires re-authentication in Sage CRM
Communicate this dependency as part of internal IT password change procedures
Monitor CRM logs for authentication-related errors

This is a known issue and is currently under investigation.

A permanent fix is being assessed to ensure that Exchange authentication failures are isolated at a per-user level, preventing a single user’s credential change from impacting global synchronisation.

Advisory: Sage CRM – Intermittent HTTP 500 Errors on Classic ASP Pages

Jobin Joseph John — Tue, 05 May 2026 17:24:21 GMT

Summary

Customers running Sage CRM on newer Microsoft Windows platforms (including Windows 11 and Windows Server 2025) may experience intermittent HTTP 500 Internal Server Errors when accessing certain Classic ASP-based pages, such as Dashboards and Self-Service screens.

This behavior is environment-related and not caused by Sage CRM application code.

Issue

When accessing Dashboards or Self-Service pages in Sage CRM, users may encounter intermittent failures, particularly during repeated page refreshes.

Symptoms

HTTP 500 errors returned from IIS
Dashboards or Self-Service pages fail to load intermittently
Errors may occur on alternating refresh attempts
No consistent or meaningful errors logged within Sage CRM

If detailed ASP errors are enabled in IIS, the following may be observed:

Active Server Pages error ‘ASP 0240’ – Script Engine Exception C0000005

Cause

This issue is related to how newer Windows operating systems handle Classic ASP server-side JavaScript execution.

In affected environments:

IIS may load JScript 9 (jscript9legacy.dll) instead of the legacy JScript 5.8 (jscript.dll)
JScript 9 is not fully compatible with Classic ASP

This incompatibility can result in access violations (C0000005), particularly in scenarios where:

VBScript and JScript are used together
Server-side JScript creates COM objects
JSON parsing or helper libraries rely on JScript

Additionally:

Classic ASP reuses script engine instances across requests
Reuse of incompatible engines can introduce instability in IIS worker processes (w3wp.exe)
Failures may occur before ASP error handling completes, resulting in generic HTTP 500 responses

Resolution

To resolve this issue, configure the server to use the legacy JScript engine.

Steps

Open Registry Editor on the Sage CRM application server
Navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
Create or update the following DWORD value:
Name: JScriptReplacement
Type: DWORD (32-bit)
Value: 0
Restart IIS for the changes to take effect:
IISRESET

If the issue persists after applying the above steps, please contact Sage Support with details of your environment and error behavior.

Additional Information

This is a known behavior documented by Microsoft in the IIS Support Blog
The issue affects Classic ASP applications broadly and is not specific to Sage CRM
Applying the registry setting forces IIS to use the legacy, fully compatible JScript engine

Microsofr References:

"Script Engine Exception. A ScriptEngine threw exception 'C0000005'"
Microsoft IIS Support Blog, June 2025: Microsoft IIS Support Blog – Script Engine Exception C0000005

Microsoft also documents the JScriptReplacement policy and confirms that disabling the policy causes JScript to be used instead of JScript9Legacy: Microsoft JScriptReplacement Policy Documentation

Available for North America! Sage CRM 2026 R1

Melissa W. — Tue, 14 Apr 2026 21:08:23 GMT

We’re pleased to announce that the Sage CRM 2026 R1 release is now available for our customers in the North America region. This release introduces several key enhancements that improve security, reliability, and Microsoft integration.

To download the update:

1. Click the link below to download and install the applicable update:

2. If you are prompted to log in, enter your Customer Portal Username and Password, then click Log In.

Important Note: If you have trouble downloading, clear your cache and cookies, or use incognito mode in your browser.

We highly recommend that all users update to the latest version to take advantage of the improvements.

What’s new in Sage CRM 2026 R1:

Expanded security enhancements across the application stack
Updates to Microsoft Exchange integration
Performance improvements in reporting and charting
An upgraded PDF generation engine supporting modern document standards
Enhanced application server security controls
Platform support for Microsoft SQL Server 2025
Fixes for priority customer-reported issues

For details on all enhancements and program fixes, please see the Sage CRM 2026 R1 Release Notes.

Thank you for being a part of the Sage CRM community. If you have any questions or need assistance with the update, please start a discussion in the Sage CRM General Discussion forum on Community Hub or visit www.Sage.com/Resources  for more options.

Advisory: VBScript Deprecation and Impact on Classic ASP in Sage CRM

Sage CRM — Wed, 08 Apr 2026 15:17:19 GMT

Microsoft has announced the deprecation of VBScript and outlined a phased plan for its removal from Windows environments. This change has potential implications for customers and partners who maintain legacy Classic ASP pages within Sage CRM that rely on VBScript.

This advisory explains what is changing, what is affected, and how to plan.

What is changing?

Microsoft is retiring VBScript in a phased approach:

Phase 1 (Current - 2026/2027): VBScript is now deprecated. VBScript remains enabled by default, transitioning to a Feature on Demand(FOD).
Phase 2 (approx. 2026/2027): VBScript FODs will be disabled by default.
Phase 3 (TBD): Complete removal of VBScript from future Windows OS releases, and calls to .vbs scripts from VBA will fail.

At that point, any application depending on VBScript will no longer function unless changes are made.

Why this matters for Sage CRM

Sage CRM itself primarily uses server-side JavaScript (JScript), but some older customisations and integrations may still rely on VBScript within Classic ASP pages.

Classic ASP supports multiple scripting languages through the Active Scripting engine, including:

VBScript
JScript

If VBScript is removed from the operating system, ASP pages written in VBScript will fail to execute.

How Sage CRM ASP pages define scripting language

In Sage CRM, ASP pages typically include a core library file that defines the scripting language.

The include file determines which language is used:

SAGECRM.JS
Sets the default language to JavaScript (JScript)
SAGECRM.VBS
Sets the default language to VBScript
SAGECRMNOLANG.JS
Does not explicitly define a language

Legacy include files may also be present for backward compatibility:

eWare.JS
ACCPACCRM.JS / ACCPACCRMNOLANG.JS
ACCPACCRM.VBS

If an ASP page references SAGECRM.VBS or another VBScript-based include, it is dependent on VBScript being available in the operating system.

What is at risk?

The following scenarios are impacted:

Custom ASP pages written in VBScript
Legacy integrations using VBScript
Older Sage CRM customisations that have not been modernised

When VBScript becomes optional or is removed:

Pages may fail with HTTP 500 errors
Script execution will not occur
Business processes relying on these pages may break

What is not impacted?

Standard Sage CRM functionality
Server-side scripting using JScript
Table-level, entity-level, and field-level scripts (which use JScript)

Recommended actions

1. Identify VBScript usage

Review your system for:

ASP pages referencing:
- SAGECRM.VBS
- ACCPACCRM.VBS
<script language="VBScript" runat="server"> blocks

This will help determine exposure.

2. Plan migration to JScript

Where possible:

Replace VBScript with JScript
Update include files to use:
- SAGECRM.JS

JScript remains supported and is aligned with Sage CRM’s core scripting model.

3. Consider modernisation using the .NET API

For more complex or business-critical functionality:

Rebuild legacy ASP pages using the Sage CRM .NET API
Move logic out of Classic ASP into supported extension points

This provides:

Better long-term supportability
Improved security
Alignment with Sage CRM’s future direction

4. Avoid reliance on VBScript Feature on Demand

While VBScript may temporarily be available as a Feature on Demand:

This is not a long-term solution
It introduces deployment and support complexity
It may not be available in future Windows versions

Migration is strongly recommended.

Microsoft’s deprecation of VBScript introduces a clear future risk for any Classic ASP pages that depend on it.

No immediate impact today
Increasing risk as VBScript becomes optional
Eventual breaking change when VBScript is removed

Customers and partners should begin identifying and modernising VBScript-based customisations now to ensure continued compatibility and support.

Sage CRM 2026 R1: Released to the regions

Sage CRM — Mon, 30 Mar 2026 07:01:59 GMT

Sage CRM 2026 R1 has been released to all Sage regions today, Monday, 30 March 2026. The software has successfully completed full quality assurance and is now available as General Availability (GA) to Sage teams worldwide.

Each Sage region will schedule its local release according to its own timelines, reflecting the accounting integrations and localisation requirements specific to that market. As a result, availability in your country will be confirmed by your local Sage team.

For details on when the update will be available to you, please contact your regional Sage support team.

What’s Included in Sage CRM 2026 R1

Sage CRM 2026 R1 is a Security and Compatibility release focused on strengthening platform resilience, stability and long-term sustainability.

This version includes:

Expanded security enhancements across the application stack
Updates to Microsoft Exchange integration
Performance improvements in reporting and charting
An upgraded PDF generation engine supporting modern document standards
Enhanced application server security controls
Platform support for Microsoft SQL Server 2025
Fixes for priority customer-reported issues

Addressed Issues in Sage CRM 2026 R1

This release includes a broad set of fixes to improve usability, reliability and system stability:

Calendar and task management
- Resolved issues with overdue task visibility resetting
- Fixed errors when creating Quick Tasks
Core product stability
- Fixed application errors when creating communications
- Resolved issues adding email addresses with special characters
Security and password management
- Improved consistency in password policy enforcement
- Addressed a security vulnerability in Apache Tomcat (updated to version 9.0.112)
Dashboards and user access
- Fixed errors affecting non-admin users viewing dashboard gadgets
Database reliability
- Resolved issues preventing successful database backups
Email and communication management
- Fixed creation of email aliases
- Resolved issues importing attachments with uppercase file extensions
Exchange and Outlook integration
- Fixed synchronization issues for Microsoft Teams webinar attendees
- Resolved connection issues with the Exchange Sync Engine
Opportunities and user interface
- Restored missing calendar icon in Opportunity screens
- Corrected incorrect date handling when creating Opportunities
Reporting
- Fixed issue where custom fields were not retained in cloned reports
Documentation improvements
- Clarified SMTP authentication requirements for email setup
- Improved guidance around UI changes such as the Import Email button
- Reduced and clarified permissions required for Exchange integration

Documentation and Further Information

Full details of all updates are available on the Sage CRM Help Centre:
https://help.sagecrm.com/

This release applies to Sage CRM both as a standalone product and when integrated with Sage accounting solutions, including Sage 50, Sage 100, Sage 200, Sage 300, Sage X3 and Sage Intacct.

Important Information

Supported environments, configurations and integrations are documented in the Sage CRM Help Centre.
Any configurations or third-party components not documented have not been tested and are not supported by Sage.

Join Our Webinar: Sage CRM 2026 R1 – A Technical Deep Dive

Sage CRM — Fri, 27 Mar 2026 08:20:43 GMT

Following the release of Sage CRM 2026 R1, we are pleased to invite partners and customers to a dedicated technical webinar exploring the latest update.

Sage CRM 2026 R1 is a Security and Compatibility release focused on strengthening platform resilience, enhancing security and ensuring alignment with modern technology standards. While this release does not introduce major new functional features, it delivers important improvements across the core architecture that support stability, performance and long-term sustainability.

This webinar will provide a detailed walkthrough of the key technical changes and what they mean for your Sage CRM environment.

What you will learn

The strategic focus of the Sage CRM 2026 R1 release
Key security and platform enhancements
Updates to Exchange integration and reporting components
Improvements to PDF generation and application server security
Support for Microsoft SQL Server 2025
Practical guidance for upgrade planning and deployment

Who should attend

This session is ideal for Sage CRM partners, consultants, system administrators and technical users responsible for maintaining or implementing Sage CRM.

Register now

Secure your place by registering here:
https://events.teams.microsoft.com/event/5ef77e14-20d2-4eb9-8fd5-16ef4070f704@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

Stay up to date with the latest Sage CRM developments and ensure you are fully prepared to take advantage of the improvements delivered in Sage CRM 2026 R1.

Updated Product Advisory: Exchange Online integration error and supported workaround versions

Sage CRM — Wed, 04 Feb 2026 11:37:33 GMT

Summary

Following further investigation and testing, Sage has confirmed the root cause of the Exchange Online integration error affecting Sage CRM and has validated the official PowerShell workaround for specific supported versions of Sage CRM.

This advisory updates and supersedes earlier guidance by confirming the exact Sage CRM versions for which the workaround is supported.

Who is affected

This issue affects:

Customers using Exchange Online with the Sage CRM Exchange Sync Engine
Sage CRM systems, where Exchange integration was previously working and then began failing

This issue does not affect:

On-premise Microsoft Exchange Server integrations
OAuth2-based import of Contacts and Emails
Other Sage CRM email functionality

Cause

Our testing has confirmed that the issue is caused by changes introduced by Microsoft to Exchange Online validation behaviour. These changes now reject requests containing a malformed or deprecated URL in XML headers used by the Exchange Sync Engine.

These XML headers were previously accepted and no longer comply with current Exchange Online validation rules. No changes were made to Sage CRM that directly caused this behaviour.

Supported Sage CRM versions for the workaround

The official PowerShell workaround has now been validated and is supported for the following Sage CRM versions:

Sage CRM 2023 R2.4 onwards
Sage CRM 2024 R2.1 onwards
Sage CRM 2025 R1
Sage CRM 2025 R2

The workaround should only be applied to these versions.

Available workaround

The official workaround, including the PowerShell script and detailed instructions, is available in the Fixes and Workarounds section of the Sage CRM Community Hub:

https://communityhub.sage.com/sage-global-solutions/sage-crm/w/fixes-and-workarounds/4230/official-workaround-exchange-online-integration-error-sage-crm-2025-r1-sage-crm-2025-r2

Earlier versions

Earlier supported versions of Sage CRM that fall below the versions listed above are not covered by this workaround. Customers running earlier releases should review upgrade options to a supported version where the workaround is applicable.

Next steps

Customers experiencing this issue and running one of the supported versions listed above should review and apply the official workaround.

Further updates will be shared on the Sage CRM Community Hub should additional guidance become available.

Product Advisory: Exchange Online integration error affecting Sage CRM

Sage CRM — Tue, 03 Feb 2026 13:07:45 GMT

Summary

Sage is aware of an issue affecting the Exchange Online integration in Sage CRM, where customers may see errors indicating that Sage CRM cannot connect to the Exchange Sync Engine. This issue is not the result of any change to Sage CRM and is related to changes in Exchange Online validation behaviour.

An official workaround is now available for certain Sage CRM versions while validation continues for earlier supported releases.

Who is affected

This issue affects:

Customers using Exchange Online with the Sage CRM Exchange Sync Engine
Sage CRM installations where Exchange integration was previously working

This issue does not affect:

On-premise Exchange Server integrations
OAuth2-based import of Contacts and Emails
Other Sage CRM email functionality

The issue has been confirmed in multiple regions, including North America, the UK, France, Germany, and Spain.

Cause

Our investigation identified that recent changes in Exchange Online now reject requests containing a malformed or deprecated URL in XML headers used by the Exchange Sync Engine. These XML headers were previously accepted but are no longer tolerated by Exchange Online.

No changes were made to Sage CRM at the time this issue began.

Timeline

27 January
First confirmed customer reports of Exchange integration failures.
30 January
Issue escalated internally to Sage CRM Development for investigation.
02 February
Investigation confirmed the issue is global and linked to stricter Exchange Online XML validation.
A partner-proposed workaround addressing the malformed XML header was reviewed and validated.
Current status
An official workaround has been validated for Sage CRM 2025 R1 and Sage CRM 2025 R2 and has been published.
Testing is ongoing for earlier supported versions.

Available workaround

An official workaround is available for the following versions:

Sage CRM 2025 R1
Sage CRM 2025 R2

The workaround includes a PowerShell script and step-by-step instructions and can be found here:

https://communityhub.sage.com/sage-global-solutions/sage-crm/w/fixes-and-workarounds/4230/official-workaround-exchange-online-integration-error-sage-crm-2025-r1-sage-crm-2025-r2

Versions under validation

Testing is currently in progress for the following supported versions:

Sage CRM 2023 R1 and R2
Sage CRM 2024 R1 and R2

Further updates will be shared once validation is complete and guidance for these versions is confirmed.

Next steps

Customers running Sage CRM 2025 R1 or 2025 R2 and affected by this issue should review and apply the published workaround.
Customers on earlier supported versions are advised to await further guidance while validation continues.

We appreciate your patience while we work to fully resolve this issue and will provide updates via the Sage CRM Community Hub as more information becomes available.

Free Security Administration Skills Training for Sage CRM

Sage CRM — Fri, 09 Jan 2026 11:37:57 GMT

Free Security Administration Skills Training for Sage CRM

Join our free, instructor-led training series and boost your Sage CRM skills in just 30 minutes a session. Running from Wednesday 28th January 2026 to Thursday 26th February 2026, these bite-sized lessons are ideal for Sage CRM users who want to master security administration features without taking time out of their busy workday.

Following the links below to register for each training session.

Schedule: Every Wednesday and Thursday
Duration: 30 minutes per session
Total Lessons: 10

If you're in CRM administration or development, this is your opportunity to get hands-on training and make the most of your CRM system.

Wednesday 28th January 4pm UK Time
- Sage CRM Training - Security Admin- Create new Teams (1 of 10)
  - how to create new User Teams that can be used to control workflow and control access to data.
    https://events.teams.microsoft.com/event/d48e239d-3e7d-4473-b1c7-48d359134c82@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Thursday 29th January 4pm UK Time
- Sage CRM Training - Security Admin- Create a User Template (2 of 10)
  - how to create a new User Template to speed up the ad hoc addition of new Users within a system.
    https://events.teams.microsoft.com/event/6a68015c-a882-42a7-b4a6-b1efc98fae31@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Wednesday 4th February 4pm UK Time
- Sage CRM Training - Security Admin- Create a User (3 of 10)
  - how to create a new User within Sage CRM.
  - how to edit an existing User details.
    https://events.teams.microsoft.com/event/5b0337cf-754b-4d47-a360-b3c402febaac@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Thursday 5th February 4pm UK Time
- Sage CRM Training - Security Admin- Use Company Teams (4 of 10)
  - how to use the Company Team security feature.
  - https://events.teams.microsoft.com/event/27d4a05a-5e6f-4f7a-a01d-8d9b41b70296@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Wednesday 11th February 4pm UK Time
- Sage CRM Training - Security Admin- Create and Edit Territory Structures (5 of 10)
  - how to create and edit Security Territories in Sage CRM.
  - https://events.teams.microsoft.com/event/d232380c-4f27-4342-bf83-d731feddaaf7@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Thursday 12th February 4pm UK Time
- Sage CRM Training - Security Admin- Create a Security Profile (6 of 10)
  - how to create a security profile in Sage CRM.
  - https://events.teams.microsoft.com/event/f9860fd1-10e6-41e0-bdd0-9cb27626ce36@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Wednesday 18th February 4pm UK Time
- Sage CRM Training - Security Admin- Edit Security Policies (7 of 10)
  - how to edit security policies in Sage CRM.
  - https://events.teams.microsoft.com/event/b598f26e-fc6a-4667-bceb-833ca0ad4963@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Thursday 19th February 4pm UK Time
- Sage CRM Training - Security Admin- Field Level Security and Mandatory Fields (8 of 10)
  - how to use Field Level Security features to control user access to data and to set field properties.
  - https://events.teams.microsoft.com/event/f81cdfd9-36a7-471d-9860-e2c94000c667@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Wednesday 25th February 4pm UK Time
- Sage CRM Training - Security Admin- User Configuration: General User Settings (9 of 10)
  - how to set the common configuration options that effect all users.
  - how to set the user Password Policies within Sage CRM.
  - https://events.teams.microsoft.com/event/8e73b650-2cb8-4bdb-b01f-e544511641f1@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8
Thursday 26th February 4pm UK Time
- Sage CRM Training - Security Admin- Reporting and Monitoring User Activity (10 of 10)
- how to report and monitor user activity within Sage CRM.
- https://events.teams.microsoft.com/event/7acc3ac4-6590-43fc-8bf4-1375f8f44b07@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

Available for North America region! Sage CRM 2024 R2.4 patch

Melissa W. — Fri, 19 Dec 2025 18:59:33 GMT

We’re excited to share that the Sage CRM 2024 R2.4 patch is now available for our North America customers. This update addresses an issue in Security Management where an executable script could be injected through an Interactive Dashboard gadget template. For details, please see the 2024 R2.4 Patch ReadMe file.

How to download

For North America customers:

Click the appropriate link below to download and install the update:

• Download Sage CRM 2024 R2.4 Full Install
• Download Sage CRM 2024 R2.4 Patch Install
• Download Sage CRM 2024 R2.4 Help Setup
If prompted to log in, enter your Customer Portal Username and Password, then click Log in.

Important Note

If you experience issues downloading, try clearing your cache and cookies, or use incognito mode in your browser.
These patches apply to Sage CRM standalone and when integrated with Sage 100 and/or Sage 300.

Just released in North America: Sage CRM 2025 R2.1

Melissa W. — Tue, 16 Dec 2025 20:36:29 GMT

We are excited to announce that a new update for Sage CRM is now available for our customers in the North America region. This update includes enhancements and program fixes.

To download the update:

Click the link below to download and install the applicable update:

Download Sage CRM 2025 R2.1 Full Install for Standalone

Download Sage CRM 2025 R2.1 Patch for Standalone

Download Sage CRM 2025 R2.1 Help Setup

If you are prompted to log in, enter your Customer Portal Username and Password, then click Log In.

Important note: If you have trouble downloading, clear your cache and cookies, or use incognito mode in your browser.

We highly recommend that all users update to the latest version to take advantage of the improvements.

Sage CRM 2025 R2.1 provides the following new enhancements:

Completion of Microsoft Graph integration for Exchange Online, including Contact and Task synchronization
Security enhancements and hardening measures
Introduction of Sage CRM Labs
Fixes for priority customer-reported issues

For details on all program fixes, please see the Sage CRM 2025 R2.1 Release Notes.

Product Advisory: Sage CRM – Sage 300 Integration Specific Patch, Sage CRM 2025 R2.1, Now Available

Sage CRM — Tue, 16 Dec 2025 09:57:36 GMT

A patch for Sage CRM 2025 R2 has been released

Release Date: 11 December 2025

The focus of the Sage CRM 2025 R2.1 patch is to fix an issue with the Sage 300 Integration. Specifically, it addresses a problem that occurred when Sage CRM was integrated with Sage 300, resulting in an error when a user attempted to post an order using a Web screen.

This error is fixed.

The patch notes available on the Community Hub (Patches | Sage CRM Help Center) include details about the issue addressed in the patch.

Sage CRM 2025 R2: Released to the regions

Sage CRM — Wed, 26 Nov 2025 13:40:00 GMT

Sage CRM 2025 R2 was released to all Sage regions today, Tuesday, 26 November 2025. The software has completed its full QA process and has been issued as General Availability (GA) to Sage teams worldwide.

Each Sage region will schedule the local release according to their own timelines, taking into account the accounting integrations specific to their market. This means that the date the software becomes available in your country is determined by your local Sage team.

Please contact your regional Sage support team for details on when you will receive access to the update.

The Release Notes for the new version list the customer cases resolved and the key enhancements addressed in Sage CRM 2025 R2.

This version includes

Completion of Microsoft Graph integration for Exchange Online, including Contact and Task synchronization
Security enhancements and hardening measures
Introduction of Sage CRM Labs
Fixes for priority customer-reported issues

Resolved Issues in Sage CRM 2025 R2

Fixed an issue where users without System Administrator rights could not open the Case List when Show Cases Pipeline was enabled.
Addressed SQL errors that occurred when accessing the Library after upgrading from older Sage CRM versions such as 7.2.
Corrected an error in the published instructions for obtaining the OAuth 2.0 client ID and secret for Entra ID.
Resolved an issue where appointments did not synchronise from Exchange Online to Sage CRM when the organiser was not a Sage CRM user.
Fixed synchronisation problems affecting all-day and multi-day appointments when the Exchange Online time zone was not UTC+00:00.
Prevented previously merged quote documents (.pdf or .docx) from being overwritten when merging the same quote again, ensuring a full history can be retained.
Resolved a Mail Merge failure that occurred when IIS auto-login was enabled.
Fixed an issue that prevented users from printing a quote when using a Quick Template.
Corrected a problem that prevented modifications to standard or custom entity workflows from being saved.

Security Enhancements and Hardening Measures

Updated and strengthened third-party components used within Sage CRM.
Resolved an issue where an executable script could be injected through an Interactive Dashboard gadget template.
Addressed a vulnerability that allowed an executable script to be inserted via the API.

Sage CRM Labs components included

Webhooks: Connect Sage CRM with external systems by triggering actions when updates occur within Sage CRM.
Sales Quotation Templates: Save and reuse complex quotes across multiple customers to accelerate sales processes.

The release will be supported by

Refreshed eLearning
Updated User Assistance
Supporting content on Community

All the changes will be described in the Help Centre. https://help.sagecrm.com/.

This article applies to Sage CRM, both as a stand-alone product and when integrated with Sage accounting products. Sage 50, Sage 100, Sage 200, Sage 300, Sage X3 and Sage Intacct.

Please note:

All environments, configurations, integrations, and 3rd-party software that Sage supports are documented in the help and guides published on the Sage CRM Help Centre.
Any environments, configurations, integrations, and 3rd-party software that are not documented here have not been tested and are therefore not supported by Sage.

Advisory: Classic Dashboards to be deprecated in Sage CRM 2025 R2

Sage CRM — Thu, 23 Oct 2025 09:08:08 GMT

Sage CRM 2025 R2 marks an important step forward in maintaining the highest levels of system security and performance. As part of our ongoing product modernization program, we have made the decision to deprecate the Classic Dashboard feature.

What is changing?

The Classic Dashboard is a legacy feature that has been retained for customers upgrading from older versions of Sage CRM. From Sage CRM 2025 R2, the feature will be formally deprecated. This means that while it remains available in existing systems, it is no longer being enhanced or maintained and may pose potential security vulnerabilities if left active.

Why is this change being made?

Our security review identified potential vulnerabilities in the legacy dashboard framework. These issues stem from older components that are not aligned with current web security standards. Continuing to support these outdated elements would limit our ability to ensure compliance with modern security practices and protect customer data.

When will the feature be removed?

The Classic Dashboard will be removed completely in Sage CRM 2026 R1.

Customers and partners should plan now to migrate all users to the modern Dashboard.

What should customers do?

If you are currently using the Classic Dashboard:

Begin reviewing and replicating key dashboards using the modern Dashboard feature.

Train users on creating and customizing dashboards with the new interface.

Need help?

Guidance on creating and customizing modern dashboards can be found in the Sage CRM Help Center and the Sage CRM Community.

For additional support, please contact your local Sage support team or Sage business partner.

This advisory applies to Sage CRM stand-alone and when integrated with Sage accounting products: Sage 50, Sage 100, Sage 200, Sage 300, Sage X3 and Sage Intacct.

Your Customer Portal Just Got a Major Upgrade!

Erzsi_I — Wed, 08 Oct 2025 16:22:53 GMT

We’ve redesigned the customer portal to make self-service faster, simpler and more intuitive – so you can get things done on your own timeline.

What’s new:

🔍 Simplified navigation to help you find what you need quickly
📝 Easy access to services and support resources
💡 Enhanced Self-Service tools to help you manage your account
🔐 Stronger security to protect your information

Check it out now: Customers.SageNorthAmerica.com

We’d love your feedback — let us know what you think.

Available for North America! Sage CRM 2025 R1.1

Melissa W. — Tue, 23 Sep 2025 17:47:58 GMT

We are pleased to announce that the Sage CRM 2025 R1.1 patch is now available for download. This patch applies to all customers currently running Sage CRM 2025 R1 and addresses the following key issues:

Mail Merge: Resolved an issue where Mail Merge failed when IIS auto login was enabled.
Exchange Integration: Fixed a synchronization issue where appointments created by non-Sage CRM users in Exchange Online did not sync to Sage CRM.
Workflow: Corrected a problem preventing modifications to standard or custom entity workflows.

For North America customers, these patches can be found in the Sage Knowledgebase article Sage CRM Hotfix Downloads. If prompted to log in, enter your Customer Portal Username and Password, then click Log in. For details on the program fixes included, please see the link below:

2025 R1.1 Patch ReadMe

Important Notes:

If you have trouble downloading, clear your cache and cookies, or use incognito mode in your browser.
These patches apply to Sage CRM standalone and when integrated with Sage 100 and/or Sage 300.

Need help?
Visit  www.Sage.com/Resources  for options, including links to Sage Knowledgebase, Community Hub, Sage University, as well as Online Case submission and Appointment Scheduling. 

Product Advisory: Sage CRM 2025 R1.1 Now Available

Sage CRM — Mon, 15 Sep 2025 14:41:21 GMT

A new patch for Sage CRM 2025 R1 has been released.

Release Date: 15 September 2025

Who should apply this patch?

This patch applies to all customers currently running Sage CRM 2025 R1. We strongly recommend applying it to ensure stability and functionality, especially if your system makes use of:

Mail Merge with IIS auto login enabled.
Exchange Online integration, where appointments created by non-CRM users need to sync.
Workflows (standard or custom) that may require editing and saving.

The following three customer issues have been resolved.

Issues Resolved

CRMS-2000, CRMS-2098, and CRMS-2138 affecting Mail Merge. When IIS auto login was enabled, the Mail merge failed. This is fixed.
CRMS-2127 affecting Exchange Integration. Appointments did not synchronize from Exchange Online to Sage CRM if the appointment organizer was not a Sage CRM User. This is fixed.
CRMS-2130, CRMS-2155 affecting workflow. It was not possible to modify and save changes to a standard or custom entity workflow. This is fixed.

Please note that these patches apply to Sage CRM standalone and when integrated with Sage accounting products: Sage 50, Sage 100, Sage 200, Sage 1000, Sage 300, Sage X3 and Sage Intacct.

The Sage Regions will announce the appropriate download links shortly and share the status of their application to integrated products.

In all cases, it’s our advice that the patch be applied as soon as possible.

Free Reporting and Marketing Administration Skills Training for Sage CRM

Sage CRM — Fri, 25 Jul 2025 10:08:04 GMT

Join our free, instructor-led lunchtime training series and boost your Sage CRM skills in just 30 minutes a session. Running from Wednesday 27th August to Thursday 11th September 2025, these bite-sized lessons are ideal for Sage CRM users who want to master reporting and marketing features without taking time out of their busy workday.

Each session focuses on a practical skill, including how to design powerful reports, incorporate charts, use tag data, manage outbound calling, and build simple campaigns.

Schedule: Every Wednesday and Thursday at lunchtime (12:30 UK time)
Duration: 30 minutes per session
Total Lessons: 6

Whether you're in sales, marketing, support, or CRM administration, this is your opportunity to get hands-on training and make the most of your CRM data.

27th August - Running a Report

how to run different types of reports and pass and set parameter values.
how to run Company, Opportunity and Case Summary Reports

Register:https://events.teams.microsoft.com/event/5f4b8d13-3be0-4b3b-9148-6883438679f6@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

28th August - Designing a Report

how to design a List report.
how to design a cross tabulated report.
how to design an historical report.

Register: https://events.teams.microsoft.com/event/0a2d5429-cbd3-4590-9307-072818ea3bb0@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

3rd September - Including a Chart in Report

how to include a chart within a report.

Register: https://events.teams.microsoft.com/event/0f4fb2bf-30c8-4875-8489-6e8c999b85ca@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

4th September - Using Tag Data in a Report or a Group

how to use Tag Data within a Report or a Group.

Register: https://events.teams.microsoft.com/event/e7bcdc26-0d1c-4ba3-bd03-fe85fc1602f4@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

10th September - Create a Simple Campaign

how to create a simple marketing campaign.
how to add an External Mail Merge and External Telesales calls as a campaign activity.
how to add Internal Mail Merge and Telesales as a campaign activity.

Register:https://events.teams.microsoft.com/event/f305f7c1-f7e0-4687-acbf-f08154037246@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

11th September - Creating & Using Outbound Calls

how to create Outbound Calls as a campaign activity.

Register:https://events.teams.microsoft.com/event/95b52149-2d54-4840-8263-59fbeee8429c@3e32dd7c-41f6-492d-a1a3-c58eb02cf4f8

Just released in North America: Sage CRM 2025 R1

Melissa W. — Wed, 09 Jul 2025 17:53:22 GMT

We are excited to announce that a new update for Sage CRM is now available for our customers in the North America region. This update includes new enhancements and program fixes.

To download the update:

Click the link below to download and install the applicable update:

If you are prompted to log in, enter your Customer Portal Username and Password, then click Log In.

Modernization of Exchange Online Integration
Addressed Exchange synchronization issues where appointments were synced with incorrect times and/or durations, or failed due to expired tokens
Security enhancements by way of resolving Apache Tomcat vulnerabilities and patched an SQL injection risk in URL handling
Dashboard and UI enhancements, including fixes for layout issues and improved access for non-admin users

For details on all program fixes, please see the Sage CRM 2025 R1 Release Notes.

Thank you for being a part of the Sage CRM community. If you have any questions or need assistance with the update, please start a discussion in the Sage CRM General Discussion forum.

Need help?
Visit  www.Sage.com/Resources  for options, including links to Sage Knowledgebase, Community Hub, Sage University, as well as Online Case submission and Appointment Scheduling. 

Available for North America: Sage CRM 2024 R2.3, 2023 R2.6 & Sage CRM 2022 R2.8 patches

Melissa W. — Mon, 30 Jun 2025 21:12:19 GMT

We are pleased to announce the Sage CRM 2024 R2.3, 2023 R2.6 & Sage CRM 2022 R2.8 patches are now available. These patches resolve synchronization issues with the Microsoft Exchange Online integration, where appointments created in Sage CRM with past dates were not syncing correctly and, in some cases, were being inadvertently deleted.

Who is affected

Microsoft Exchange On-Premise Users: No action is required. Your integration is unaffected.
Microsoft Exchange Online Users: You must apply this patch to fix the synchronization issue.

Important Notes:

If you have trouble downloading, clear your cache and cookies, or use incognito mode in your browser.
These patches apply to Sage CRM standalone and when integrated with Sage 100 and/or Sage 300.

Need help?
Visit  www.Sage.com/Resources  for options, including links to Sage Knowledgebase, Community Hub, Sage University, as well as Online Case submission and Appointment Scheduling. 

Product Advisory: Sage CRM – Exchange Online Integration Patch, Sage CRM 2022 R2.8 & Sage CRM 2023 R2.6, Now Available

Sage CRM — Tue, 24 Jun 2025 13:57:57 GMT

New patches for Sage CRM 2022 R2 and Sage CRM 2023 R2 have been released

Release Date: 24 June 2025

The main focus of the Sage CRM 2022 R2.8 and Sage CRM 2023 R2.6 patches is to fix an issue with Exchange Online synchronization. Specifically, it addresses a problem where appointments created in Sage CRM and dated in the past were not being synchronized with Exchange Online—and in some cases, these appointments were also deleted from Sage CRM.

Summary of Key Fix:

Issue: Past appointments created in Sage CRM were not syncing with Exchange Online and were being deleted.
Fix: Patch resolves the synchronization failure for past-dated appointments.
Scope: Applies only to Sage CRM integrated with Exchange Online, not on-premises Exchange Server.

The patch notes available on the Sage CRM Help Center include details about the issues addressed in the patch, as well as instructions to (re)create an Exchange Online integration for those customers who are upgrading directly from the relevant R1 or R2 maintenance release.

This completes the patches for all supported versions of Sage CRM that address the issue CRM-2960/CRMS-2102

Product Advisory: Sage CRM – Exchange Online Integration Patch, Sage CRM 2024 R2.3, Now Available

Sage CRM — Thu, 19 Jun 2025 12:00:35 GMT

A new patch for Sage CRM 2024 R2 has been released

Release Date: 19 June 2025

The main focus of the Sage CRM 2024 R2.3 patch is to fix an issue with Exchange Online synchronization. Specifically, it addresses a problem where appointments created in Sage CRM and dated in the past were not being synchronized with Exchange Online—and in some cases, these appointments were also deleted from Sage CRM.

Summary of Key Fix:

Issue: Past appointments created in Sage CRM were not syncing with Exchange Online and were being deleted.
Fix: Patch resolves the synchronization failure for past-dated appointments.
Scope: Applies only to Sage CRM integrated with Exchange Online, not on-premises Exchange Server.

The patch notes available on the Community Hub (Patches | Sage CRM Help Center) include details about the issues addressed in the patch, as well as instructions to (re)create an Exchange Online integration for those customers who are upgrading directly from the relevant R1 or R2 maintenance release.

We are working on an additional patches for other supported versions of Sage CRM.

Sage CRM 2025 R1: Released to the regions

Sage CRM — Fri, 13 Jun 2025 14:10:48 GMT

Sage CRM 2025 R1 was released to the regions today, Friday, 13th June 2025. The software has passed its QA process and has been issued as 'GA' to each Sage team globally. Each Sage region is responsible for scheduling the software release in their territory, taking into account the various accounting integrations in their territory. As a consequence, the local release date of the software is down to each local Sage team.

Please get in touch with your local Sage support team to inquire about when they will provide you with access to the software.

The Release Notes for the new version list the customer cases resolved and the key enhancements addressed in Sage CRM 2025 R1.

This version has delivered the Modernisation of Exchange Online Integration:

Replaces Application Impersonation with OAuth 2.0 and Microsoft Graph API.
Details required permissions (Graph + Office 365) and setup process.
Complete sync process and user connection steps are included.

Resolved Issues

Over 30 issues were addressed, including:

Calendar display bugs.
File attachment syntax errors.
Mail merge failures due to special characters.
Multiple synchronisation bugs in Exchange integration (e.g., time mismatches, token expiry).
Security updates, including SQL injection and Tomcat CVEs.

The release will be supported by

Refreshed eLearning
Updated User Assistance
Supporting content on Community

All the changes will be described in the Help Centre. https://help.sagecrm.com/.

This article applies to Sage CRM, both as a stand-alone product and when integrated with Sage accounting products. Sage 50, Sage 100, Sage 200, Sage 1000, Sage 300, Sage X3 and Sage Intacct.

Please note:

All environments, configurations, integrations, and 3rd-party software that Sage supports are documented in the help and guides published on the Sage CRM Help Centre.

Any environments, configurations, integrations, and 3rd-party software that are not documented here have not been tested and are therefore not supported by Sage.

New Free Training Series: Sage CRM User Fundamentals – Now Available on YouTube

Sage CRM — Fri, 06 Jun 2025 14:27:16 GMT

We’re pleased to announce that the full Sage CRM User Fundamentals training series is now available to watch on demand via the Sage Support & Training YouTube channel.

📺 Watch the full playlist here:
🔗 Sage CRM User Fundamentals – YouTube Playlist

This series is ideal for new Sage CRM users and system administrators, and it covers the essential skills needed to work confidently with Sage CRM. Each session is under 30 minutes long, making it easy to fit into your schedule.

What’s included in the training:

Getting Started with Sage CRM
Adding and Changing Contact Data
Searching for Data
Advanced Find
Creating and Using Groups of Records
Working with Appointments and Tasks
Working with Emails and Documents
Customer Care Features
Leads and Opportunities
Working with Sales Forecasts

The course is suitable for beginners and experienced users alike. It’s also a great resource for Sage colleagues and partners supporting Sage CRM implementations.

If you’ve been looking for a clear and practical introduction to Sage CRM—or want to sharpen your existing knowledge—this is a great place to start.

Feel free to share this with your team or customers!