https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:21:51.487520+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-07093 bdu:2024-07093 2026-10-03T05:21:51.494358+00:00 bdu:2024-07093 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0671 certfr-2024-avi-0671 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T05:21:51.494415+00:00 certfr-2024-avi-0671 https://cve.radiocsirt.org/vuln/euvd-2026-158363 EUVD-2026-158363 2026-10-03T05:21:51.494433+00:00 EUVD-2026-158363 https://cve.radiocsirt.org/vuln/fkie_cve-2024-33003 fkie_cve-2024-33003 2026-10-03T05:21:51.494444+00:00

Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as passwords, email addresses, mobile numbers, coupon codes, and voucher codes, to be included in the request URL as query or path parameters. On successful exploitation, this could lead to a High impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/ghsa-7m3q-23p4-mw4v GHSA-7m3q-23p4-mw4v 2026-10-03T05:21:51.494470+00:00

Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as passwords, email addresses, mobile numbers, coupon codes, and voucher codes, to be included in the request URL as query or path parameters. On successful exploitation, this could lead to a High impact on confidentiality and integrity of the application.

 https://cve.radiocsirt.org/vuln/gsd-2024-33003 gsd-2024-33003 2026-10-03T05:21:51.494485+00:00 gsd-2024-33003 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1818 WID-SEC-W-2024-1818 — SAP Security Patch Day – August 2024 2026-10-03T05:21:51.494494+00:00

Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Dateien zu löschen oder zu manipulieren oder einen Cross Site Scripting-Angriff durchzuführen.