https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T10:22:08.137520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0737 certfr-2023-avi-0737 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T10:22:08.158367+00:00 certfr-2023-avi-0737 https://cve.radiocsirt.org/vuln/euvd-2026-188136 EUVD-2026-188136 2026-10-04T10:22:08.158420+00:00 EUVD-2026-188136 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41369 fkie_cve-2023-41369 2026-10-04T10:22:08.158436+00:00

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

 https://cve.radiocsirt.org/vuln/ghsa-wwvh-435q-gw8h GHSA-wwvh-435q-gw8h 2026-10-04T10:22:08.158471+00:00

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

 https://cve.radiocsirt.org/vuln/gsd-2023-41369 gsd-2023-41369 2026-10-04T10:22:08.158489+00:00 gsd-2023-41369 https://cve.radiocsirt.org/vuln/pysec-2023-172 PYSEC-2023-172 2026-10-04T10:22:08.158501+00:00

Affected: PyPI: hana-ml

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2309 WID-SEC-W-2023-2309 — SAP Patchday September 2023 2026-10-04T10:22:08.158524+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.