https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T18:51:32.340567+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7383 EUVD-2026-7383 2026-10-05T18:51:32.343788+00:00 EUVD-2026-7383 https://cve.radiocsirt.org/vuln/fkie_cve-2023-4932 fkie_cve-2023-4932 2026-10-05T18:51:32.343822+00:00

SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredProcess/do` endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a low-privileged user. Only versions 9.4_M7 and 9.4_M8 were tested and confirmed to be vulnerable, status of others is unknown. For above mentioned versions hot fixes were published.

 https://cve.radiocsirt.org/vuln/ghsa-v68r-h54c-vpg9 GHSA-v68r-h54c-vpg9 2026-10-05T18:51:32.343861+00:00

SAS application is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in the `_program` parameter of the the `/SASStoredProcess/do` endpoint allows arbitrary JavaScript to be executed when specially crafted URL is opened by an authenticated user. The attack is possible from a low-privileged user. Only versions 9.4_M7 and 9.4_M8 were tested and confirmed to be vulnerable, status of others is unknown. For above mentioned versions hot fixes were published.

 https://cve.radiocsirt.org/vuln/gsd-2023-4932 gsd-2023-4932 2026-10-05T18:51:32.343881+00:00 gsd-2023-4932