https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:05:43.844393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0019 certfr-2023-avi-0019 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:05:43.915934+00:00 certfr-2023-avi-0019 https://cve.radiocsirt.org/vuln/cnvd-2023-03049 cnvd-2023-03049 2026-10-03T09:05:43.915980+00:00 cnvd-2023-03049 https://cve.radiocsirt.org/vuln/euvd-2026-227937 EUVD-2026-227937 2026-10-03T09:05:43.915999+00:00 EUVD-2026-227937 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0015 fkie_cve-2023-0015 2026-10-03T09:05:43.916012+00:00

In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/ghsa-7v6p-hrxh-28hh GHSA-7v6p-hrxh-28hh 2026-10-03T09:05:43.916041+00:00

In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/gsd-2023-0015 gsd-2023-0015 2026-10-03T09:05:43.916058+00:00 gsd-2023-0015 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0040 WID-SEC-W-2023-0040 — SAP Patchday Januar 2023 2026-10-03T09:05:43.916069+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren.