https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:11:41.160251+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0301 certfr-2023-avi-0301 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T07:11:41.223854+00:00 certfr-2023-avi-0301 https://cve.radiocsirt.org/vuln/euvd-2026-214237 EUVD-2026-214237 2026-10-03T07:11:41.223896+00:00 EUVD-2026-214237 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29109 fkie_cve-2023-29109 2026-10-03T07:11:41.223911+00:00

The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula injection. An authorized attacker can inject arbitrary Excel formulas into fields like the Tooltip of the Custom Hints List. Once the victim opens the downloaded Excel document, the formula will be executed. As a result, an attacker can cause limited impact on the confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/ghsa-c778-h25h-v8vc GHSA-c778-h25h-v8vc 2026-10-03T07:11:41.223941+00:00

The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows an Excel formula injection. An authorized attacker can inject arbitrary Excel formulas into fields like the Tooltip of the Custom Hints List. Once the victim opens the downloaded Excel document, the formula will be executed. As a result, an attacker can cause limited impact on the confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/gsd-2023-29109 gsd-2023-29109 2026-10-03T07:11:41.223958+00:00 gsd-2023-29109 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0904 WID-SEC-W-2023-0904 — SAP Patchday April 2023 2026-10-03T07:11:41.223969+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.