https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:58:34.892386+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-1101 certfr-2022-avi-1101 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T13:58:34.896708+00:00 certfr-2022-avi-1101 https://cve.radiocsirt.org/vuln/euvd-2026-232281 EUVD-2026-232281 2026-10-03T13:58:34.896746+00:00 EUVD-2026-232281 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41271 fkie_cve-2022-41271 2026-10-03T13:58:34.896760+00:00

An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to:

* Read any information * Modify sensitive information * Denial of Service attacks (DoS) * SQL Injection

 https://cve.radiocsirt.org/vuln/ghsa-h4qc-785v-gj2p GHSA-h4qc-785v-gj2p 2026-10-03T13:58:34.896792+00:00

An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to: * Read any information * Modify sensitive information * Denial of Service attacks (DoS) * SQL Injection

 https://cve.radiocsirt.org/vuln/gsd-2022-41271 gsd-2022-41271 2026-10-03T13:58:34.896810+00:00 gsd-2022-41271 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2290 WID-SEC-W-2022-2290 — SAP Patchday Dezember 2022 2026-10-03T13:58:34.896821+00:00

Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.