https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:45:59.798325+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0209 certfr-2024-avi-0209 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits SAP</span>. Certaines d'entre el… 2026-10-04T05:45:59.865649+00:00 certfr-2024-avi-0209 https://cve.radiocsirt.org/vuln/cnvd-2024-13534 cnvd-2024-13534 2026-10-04T05:45:59.865698+00:00 cnvd-2024-13534 https://cve.radiocsirt.org/vuln/euvd-2026-4431 EUVD-2026-4431 2026-10-04T05:45:59.865720+00:00 EUVD-2026-4431 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27902 fkie_cve-2024-27902 2026-10-04T05:45:59.865739+00:00

Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system

 https://cve.radiocsirt.org/vuln/ghsa-rh37-q3m6-762g GHSA-rh37-q3m6-762g 2026-10-04T05:45:59.865795+00:00

Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system

 https://cve.radiocsirt.org/vuln/gsd-2024-27902 gsd-2024-27902 2026-10-04T05:45:59.865840+00:00 gsd-2024-27902 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0597 WID-SEC-W-2024-0597 — SAP Security Patch Day – März 2024 2026-10-04T05:45:59.865855+00:00

Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.