https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:05:25.132003+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-12954 bdu:2025-12954 2026-10-04T17:05:25.144814+00:00 bdu:2025-12954 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0754 certfr-2024-avi-0754 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-04T17:05:25.144850+00:00 certfr-2024-avi-0754 https://cve.radiocsirt.org/vuln/euvd-2026-162256 EUVD-2026-162256 2026-10-04T17:05:25.144868+00:00 EUVD-2026-162256 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42378 fkie_cve-2024-42378 2026-10-04T17:05:25.144880+00:00

Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/ghsa-8j5m-w5gm-27m4 GHSA-8j5m-w5gm-27m4 2026-10-04T17:05:25.144907+00:00

Due to weak encoding of user-controlled inputs, eProcurement on SAP S/4HANA allows malicious scripts to be executed in the application, potentially leading to a Reflected Cross-Site Scripting (XSS) vulnerability. This has no impact on the availability of the application, but it can have some minor impact on its confidentiality and integrity.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2086 WID-SEC-W-2024-2086 — SAP Patchday September 2024 2026-10-04T17:05:25.144923+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu erzeugen oder einen Cross-Site-Scripting-Angriff durchzuführen.