https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:15:29.429857+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0228 certfr-2023-avi-0228 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T07:15:29.495792+00:00 certfr-2023-avi-0228 https://cve.radiocsirt.org/vuln/euvd-2026-219479 EUVD-2026-219479 2026-10-03T07:15:29.495833+00:00 EUVD-2026-219479 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26459 fkie_cve-2023-26459 2026-10-03T07:15:29.495848+00:00

Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to an arbitrary URL which can reveal, modify or make unavailable non-sensitive information, leading to low impact on Confidentiality, Integrity and Availability.

 https://cve.radiocsirt.org/vuln/ghsa-g622-v45p-2m7j GHSA-g622-v45p-2m7j 2026-10-03T07:15:29.495877+00:00

Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to send a request to an arbitrary URL which can reveal, modify or make unavailable non-sensitive information, leading to low impact on Confidentiality, Integrity and Availability.

 https://cve.radiocsirt.org/vuln/gsd-2023-26459 gsd-2023-26459 2026-10-03T07:15:29.495895+00:00 gsd-2023-26459 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0635 WID-SEC-W-2023-0635 — SAP Patchday März 2023 2026-10-03T07:15:29.495906+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.