https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T12:32:53.355336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-13147 cnvd-2020-13147 2026-10-09T12:32:53.422292+00:00 cnvd-2020-13147 https://cve.radiocsirt.org/vuln/euvd-2026-39040 EUVD-2026-39040 2026-10-09T12:32:53.422335+00:00 EUVD-2026-39040 https://cve.radiocsirt.org/vuln/fkie_cve-2020-9352 fkie_cve-2020-9352 2026-10-09T12:32:53.422350+00:00

An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter. NOTE: the documentation states "These tools are, by default, available to anyone ... so they should only be deployed into a trusted environment. Alternately, the tools can easily be restricted to administrators or end users by protecting the tools path with normal authentication and authorization mechanisms on the web server."

 https://cve.radiocsirt.org/vuln/ghsa-9882-28wj-g67p GHSA-9882-28wj-g67p 2026-10-09T12:32:53.422384+00:00

An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter.

 https://cve.radiocsirt.org/vuln/gsd-2020-9352 gsd-2020-9352 2026-10-09T12:32:53.422402+00:00 gsd-2020-9352