https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:03:18.355315+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0301 certfr-2023-avi-0301 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T23:03:18.359454+00:00 certfr-2023-avi-0301 https://cve.radiocsirt.org/vuln/cnvd-2023-40166 cnvd-2023-40166 2026-10-04T23:03:18.359518+00:00 cnvd-2023-40166 https://cve.radiocsirt.org/vuln/euvd-2026-214239 EUVD-2026-214239 2026-10-04T23:03:18.359559+00:00 EUVD-2026-214239 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28765 fkie_cve-2023-28765 2026-10-04T23:03:18.359573+00:00

An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the privileges of the BI user, the attacker can perform operations that can completely compromise the application.

 https://cve.radiocsirt.org/vuln/ghsa-5xr6-mfp2-pfhc GHSA-5xr6-mfp2-pfhc 2026-10-04T23:03:18.359606+00:00

An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar file and further decrypt the file. After this attacker can gain access to BI user’s passwords and depending on the privileges of the BI user, the attacker can perform operations that can completely compromise the application.

 https://cve.radiocsirt.org/vuln/gsd-2023-28765 gsd-2023-28765 2026-10-04T23:03:18.359624+00:00 gsd-2023-28765 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0904 WID-SEC-W-2023-0904 — SAP Patchday April 2023 2026-10-04T23:03:18.359635+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.