https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:40:17.792956+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2020-avi-549 certfr-2020-avi-549 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-05T15:40:17.861002+00:00 certfr-2020-avi-549 https://cve.radiocsirt.org/vuln/cnvd-2020-65569 cnvd-2020-65569 2026-10-05T15:40:17.861046+00:00 cnvd-2020-65569 https://cve.radiocsirt.org/vuln/euvd-2026-37236 EUVD-2026-37236 2026-10-05T15:40:17.861061+00:00 EUVD-2026-37236 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6302 fkie_cve-2020-6302 2026-10-05T15:40:17.861073+00:00

SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.

 https://cve.radiocsirt.org/vuln/ghsa-m697-r4gm-82f3 GHSA-m697-r4gm-82f3 2026-10-05T15:40:17.861102+00:00

SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.

 https://cve.radiocsirt.org/vuln/gsd-2020-6302 gsd-2020-6302 2026-10-05T15:40:17.861118+00:00 gsd-2020-6302