https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:35:27.370443+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-07392 bdu:2023-07392 2026-10-04T19:35:27.467928+00:00 bdu:2023-07392 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0737 certfr-2023-avi-0737 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T19:35:27.467970+00:00 certfr-2023-avi-0737 https://cve.radiocsirt.org/vuln/euvd-2026-188687 EUVD-2026-188687 2026-10-04T19:35:27.467991+00:00 EUVD-2026-188687 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42472 fkie_cve-2023-42472 2026-10-04T19:35:27.468013+00:00

Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/ghsa-7m6v-v5x3-rc3h GHSA-7m6v-v5x3-rc3h 2026-10-04T19:35:27.468065+00:00

Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/gsd-2023-42472 gsd-2023-42472 2026-10-04T19:35:27.468098+00:00 gsd-2023-42472 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2309 WID-SEC-W-2023-2309 — SAP Patchday September 2023 2026-10-04T19:35:27.468121+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.