https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:02:21.506745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08962 bdu:2023-08962 2026-10-03T10:02:21.611999+00:00 bdu:2023-08962 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 certfr-2023-avi-1020 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T10:02:21.612035+00:00 certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-270607 EUVD-2026-270607 2026-10-03T10:02:21.612055+00:00 EUVD-2026-270607 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50423 fkie_cve-2023-50423 2026-10-03T10:02:21.612066+00:00

SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

 https://cve.radiocsirt.org/vuln/ghsa-6mjg-37cp-42x5 GHSA-6mjg-37cp-42x5 — Improper Privilege Management in sap-xssec 2026-10-03T10:02:21.612096+00:00

Affected: PyPI: sap-xssec

### Impact

SAP BTP Security Services Integration Library ([Python] sap-xssec) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

### Patches Upgrade to patched version >= 4.1.0 We always recommend to upgrade to the latest released version.

### Workarounds No workarounds

### References https://www.cve.org/CVERecord?id=CVE-2023-50423

 https://cve.radiocsirt.org/vuln/gsd-2023-50423 gsd-2023-50423 2026-10-03T10:02:21.612123+00:00 gsd-2023-50423 https://cve.radiocsirt.org/vuln/pysec-2023-261 PYSEC-2023-261 2026-10-03T10:02:21.612135+00:00

Affected: PyPI: sap-xssec

SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3103 WID-SEC-W-2023-3103 — SAP Software: Mehrere Schwachstellen 2026-10-03T10:02:21.612153+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.