https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T11:16:47.966519+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1101 certfr-2022-avi-1101 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T11:16:47.971808+00:00 certfr-2022-avi-1101 https://cve.radiocsirt.org/vuln/euvd-2026-232349 EUVD-2026-232349 2026-10-03T11:16:47.971847+00:00 EUVD-2026-232349 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41266 fkie_cve-2022-41266 2026-10-03T11:16:47.971862+00:00

Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2205, allows malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a DOM Cross-Site Scripting (XSS) attack.  As a result, an attacker may be able to steal user tokens and achieve a full account takeover including access to administrative tools in SAP Commerce.

 https://cve.radiocsirt.org/vuln/ghsa-2jrj-r8hh-8g59 GHSA-2jrj-r8hh-8g59 2026-10-03T11:16:47.971891+00:00

Due to a lack of proper input validation, SAP Commerce Webservices 2.0 (Swagger UI) - versions 1905, 2005, 2105, 2011, 2205, allows malicious inputs from untrusted sources, which can be leveraged by an attacker to execute a DOM Cross-Site Scripting (XSS) attack. As a result, an attacker may be able to steal user tokens and achieve a full account takeover including access to administrative tools in SAP Commerce.

 https://cve.radiocsirt.org/vuln/gsd-2022-41266 gsd-2022-41266 2026-10-03T11:16:47.971909+00:00 gsd-2022-41266 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2290 WID-SEC-W-2022-2290 — SAP Patchday Dezember 2022 2026-10-03T11:16:47.971921+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.