Two Patches for Sage CRM are now available:

• Sage CRM 2022 R2.5
• Sage CRM 2023 R2.3

These patches include additional checks added to protect from an SQL injection attack when setting up groups. For North America customers, these patches can be found in the Sage Knowledgebase article Sage CRM Hotfix Downloads. If you are prompted to log in, enter your Customer Portal Username and Password, and then click Log in.

The vulnerability addressed in these patches is not found in Sage CRM 2024 R1.

The following direct upgrades are supported:

• 2022 R1 - 2022 R2.5
• 2022 R2 - 2022 R2.5
• 2023 R1 - 2023 R2.3
• 2023 R2 - 2023 R2.3

Note: Support for Sage CRM 2021 R1 and Sage CRM 2021 R2 will end on September 30, 2024.

Please note that these patches apply to Sage CRM standalone and when integrated with Sage accounting products, Sage 100 and Sage 300.

We advise that patches be applied as soon as possible.

Need help?
Visit www.Sage.com/Resources for options,  including links to Sage Knowledgebase, Community Hub, Sage University, as well as Chat and Online Case submission.