https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:18:34.810515+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08961 bdu:2023-08961 2026-10-03T05:18:34.892251+00:00 bdu:2023-08961 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 certfr-2023-avi-1020 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T05:18:34.892288+00:00 certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-270608 EUVD-2026-270608 2026-10-03T05:18:34.892307+00:00 EUVD-2026-270608 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50422 fkie_cve-2023-50422 2026-10-03T05:18:34.892319+00:00

SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

 https://cve.radiocsirt.org/vuln/ghsa-59c9-pxq8-9c73 GHSA-59c9-pxq8-9c73 — Improper JWT Signature Validation in SAP Security Services Library 2026-10-03T05:18:34.892348+00:00

Affected: Maven: com.sap.cloud.security:java-security, Maven: com.sap.cloud.security:spring-security, Maven: com.sap.cloud.security.xsuaa:spring-xsuaa

### Impact SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

### Patches Upgrade to patched version >= 2.17.0 or >= 3.3.0 We always recommend to upgrade to the latest released version.

### Workarounds No workarounds

### References https://www.cve.org/CVERecord?id=CVE-2023-50422

 https://cve.radiocsirt.org/vuln/gsd-2023-50422 gsd-2023-50422 2026-10-03T05:18:34.892382+00:00 gsd-2023-50422 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3103 WID-SEC-W-2023-3103 — SAP Software: Mehrere Schwachstellen 2026-10-03T05:18:34.892395+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.