https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:09:13.249487+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06264 bdu:2025-06264 2026-10-03T21:09:13.351196+00:00 bdu:2025-06264 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0190 certfr-2025-avi-0190 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T21:09:13.351262+00:00 certfr-2025-avi-0190 https://cve.radiocsirt.org/vuln/cnvd-2025-07595 cnvd-2025-07595 2026-10-03T21:09:13.351318+00:00 cnvd-2025-07595 https://cve.radiocsirt.org/vuln/euvd-2026-221724 EUVD-2026-221724 2026-10-03T21:09:13.351347+00:00 EUVD-2026-221724 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27430 fkie_cve-2025-27430 2026-10-03T21:09:13.351358+00:00

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

 https://cve.radiocsirt.org/vuln/ghsa-535h-62c3-g4j6 GHSA-535h-62c3-g4j6 2026-10-03T21:09:13.351389+00:00

Under certain conditions, an SSRF vulnerability in SAP CRM and SAP S/4HANA (Interaction Center) allows an attacker with low privileges to access restricted information. This flaw enables the attacker to send requests to internal network resources, thereby compromising the application's confidentiality. There is no impact on integrity or availability

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0521 WID-SEC-W-2025-0521 — SAP Patchday März 2025: Mehrere Schwachstellen 2026-10-03T21:09:13.351406+00:00

Ein Angreifer kann diese Schwachstellen ausnutzen, um erhöhte Privilegien zu erlangen, beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.