https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:07:00.907915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0228 certfr-2023-avi-0228 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T19:07:00.913657+00:00 certfr-2023-avi-0228 https://cve.radiocsirt.org/vuln/euvd-2026-219404 EUVD-2026-219404 2026-10-03T19:07:00.913694+00:00 EUVD-2026-219404 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27268 fkie_cve-2023-27268 2026-10-03T19:07:00.913709+00:00

SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowing an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability., resulting in escalation of privileges.

 https://cve.radiocsirt.org/vuln/ghsa-7gph-fg9q-775p GHSA-7gph-fg9q-775p 2026-10-03T19:07:00.913738+00:00

SAP NetWeaver AS Java (Object Analyzing Service) - version 7.50, does not perform necessary authorization checks, allowing an unauthenticated attacker to attach to an open interface and make use of an open naming and directory API to access a service which will enable them to access but not modify server settings and data with no effect on availability., resulting in escalation of privileges.

 https://cve.radiocsirt.org/vuln/gsd-2023-27268 gsd-2023-27268 2026-10-03T19:07:00.913754+00:00 gsd-2023-27268 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0635 WID-SEC-W-2023-0635 — SAP Patchday März 2023 2026-10-03T19:07:00.913765+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.