https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:37:46.987725+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-05017 bdu:2024-05017 2026-10-03T14:37:47.085015+00:00 bdu:2024-05017 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0125 certfr-2024-avi-0125 — De multiples vulnérabilités ont été découvertes dans SAP. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-03T14:37:47.085053+00:00 certfr-2024-avi-0125 https://cve.radiocsirt.org/vuln/euvd-2026-214539 EUVD-2026-214539 2026-10-03T14:37:47.085073+00:00 EUVD-2026-214539 https://cve.radiocsirt.org/vuln/fkie_cve-2024-22126 fkie_cve-2024-22126 2026-10-03T14:37:47.085084+00:00

The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.

 https://cve.radiocsirt.org/vuln/ghsa-r3c3-f9mx-3phh GHSA-r3c3-f9mx-3phh 2026-10-03T14:37:47.085114+00:00

The User Admin application of SAP NetWeaver AS for Java - version 7.50, insufficiently validates and improperly encodes the incoming URL parameters before including them into the redirect URL. This results in Cross-Site Scripting (XSS) vulnerability, leading to a high impact on confidentiality and mild impact on integrity and availability.

 https://cve.radiocsirt.org/vuln/gsd-2024-22126 gsd-2024-22126 2026-10-03T14:37:47.085130+00:00 gsd-2024-22126 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0355 WID-SEC-W-2024-0355 — SAP Software: Mehrere Schwachstellen 2026-10-03T14:37:47.085140+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.