https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:24:13.445916+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04264 bdu:2024-04264 2026-10-04T01:24:13.525717+00:00 bdu:2024-04264 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0125 certfr-2024-avi-0125 — De multiples vulnérabilités ont été découvertes dans SAP. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-04T01:24:13.525753+00:00 certfr-2024-avi-0125 https://cve.radiocsirt.org/vuln/cnvd-2024-10198 cnvd-2024-10198 2026-10-04T01:24:13.525772+00:00 cnvd-2024-10198 https://cve.radiocsirt.org/vuln/euvd-2026-238456 EUVD-2026-238456 2026-10-04T01:24:13.525785+00:00 EUVD-2026-238456 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25642 fkie_cve-2024-25642 2026-10-04T01:24:13.525795+00:00

Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the mutual authentication. Hence, the attacker can intercept the request to view/modify sensitive information. There is no impact on the availability of the system.

 https://cve.radiocsirt.org/vuln/ghsa-ggv5-38c7-p4jr GHSA-ggv5-38c7-p4jr 2026-10-04T01:24:13.525824+00:00

Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the mutual authentication. Hence, the attacker can intercept the request to view/modify sensitive information. There is no impact on the availability of the system.

 https://cve.radiocsirt.org/vuln/gsd-2024-25642 gsd-2024-25642 2026-10-04T01:24:13.525840+00:00 gsd-2024-25642 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0355 WID-SEC-W-2024-0355 — SAP Software: Mehrere Schwachstellen 2026-10-04T01:24:13.525850+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.