https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:04:15.075994+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0228 certfr-2023-avi-0228 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T14:04:15.082188+00:00 certfr-2023-avi-0228 https://cve.radiocsirt.org/vuln/euvd-2026-219483 EUVD-2026-219483 2026-10-03T14:04:15.082227+00:00 EUVD-2026-219483 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25615 fkie_cve-2023-25615 2026-10-03T14:04:15.082242+00:00

Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead to a high impact on the confidentiality and no impact on the availability and integrity of the application.

 https://cve.radiocsirt.org/vuln/ghsa-x94j-mc2f-6995 GHSA-x94j-mc2f-6995 2026-10-03T14:04:15.082271+00:00

Due to insufficient input sanitization, SAP ABAP - versions 751, 753, 753, 754, 756, 757, 791, allows an authenticated high privileged user to alter the current session of the user by injecting the malicious database queries over the network and gain access to the unintended data. This may lead to a high impact on the confidentiality and no impact on the availability and integrity of the application.

 https://cve.radiocsirt.org/vuln/gsd-2023-25615 gsd-2023-25615 2026-10-03T14:04:15.082288+00:00 gsd-2023-25615 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0635 WID-SEC-W-2023-0635 — SAP Patchday März 2023 2026-10-03T14:04:15.082299+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.