https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:09:11.603409+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02942 bdu:2023-02942 2026-10-04T13:09:11.695138+00:00 bdu:2023-02942 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0369 certfr-2023-avi-0369 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T13:09:11.695180+00:00 certfr-2023-avi-0369 https://cve.radiocsirt.org/vuln/euvd-2026-212248 EUVD-2026-212248 2026-10-04T13:09:11.695256+00:00 EUVD-2026-212248 https://cve.radiocsirt.org/vuln/fkie_cve-2023-29188 fkie_cve-2023-29188 2026-10-04T13:09:11.695274+00:00

SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker with user level access can read and modify some sensitive information but cannot delete the data.

 https://cve.radiocsirt.org/vuln/ghsa-77j2-jh3v-5933 GHSA-77j2-jh3v-5933 2026-10-04T13:09:11.695305+00:00

SAP CRM WebClient UI - versions SAPSCORE 129, S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 701, WEBCUIF 731, WEBCUIF 746, WEBCUIF 747, WEBCUIF 748, WEBCUIF 800, WEBCUIF 801, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. After successful exploitation, an attacker with user level access can read and modify some sensitive information but cannot delete the data.

 https://cve.radiocsirt.org/vuln/gsd-2023-29188 gsd-2023-29188 2026-10-04T13:09:11.695324+00:00 gsd-2023-29188 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1168 WID-SEC-W-2023-1168 — SAP Patchday Mai 2023 2026-10-04T13:09:11.695335+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.