https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:59:15.157103+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-04387 bdu:2023-04387 2026-10-03T10:59:15.264035+00:00 bdu:2023-04387 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0531 certfr-2023-avi-0531 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T10:59:15.264072+00:00 certfr-2023-avi-0531 https://cve.radiocsirt.org/vuln/cnvd-2023-100012 cnvd-2023-100012 2026-10-03T10:59:15.264102+00:00 cnvd-2023-100012 https://cve.radiocsirt.org/vuln/euvd-2026-8799 EUVD-2026-8799 2026-10-03T10:59:15.264114+00:00 EUVD-2026-8799 https://cve.radiocsirt.org/vuln/fkie_cve-2023-36922 fkie_cve-2023-36922 2026-10-03T10:59:15.264124+00:00

Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.

 https://cve.radiocsirt.org/vuln/ghsa-4qhp-mwrw-89jx GHSA-4qhp-mwrw-89jx 2026-10-03T10:59:15.264153+00:00

Due to programming error in function module or report, SAP NetWeaver ABAP (IS-OIL) - versions 600, 602, 603, 604, 605, 606, 617, 618, 800, 802, 803, 804, 805, 806, 807, allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common (default) extension.  On successful exploitation, the attacker can read or modify the system data as well as shut down the system.

 https://cve.radiocsirt.org/vuln/gsd-2023-36922 gsd-2023-36922 2026-10-03T10:59:15.264170+00:00 gsd-2023-36922 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1705 WID-SEC-W-2023-1705 — SAP Patchday Juli 2023 2026-10-03T10:59:15.264181+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code oder Betriebssystembefehle auszuführen, Sicherheitsmechanismen zu umgehen, einen Denial of Service-Zustand auszulösen oder Informationen offenzulegen.