https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:54:23.303996+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15896 bdu:2025-15896 2026-10-02T16:54:23.307752+00:00 bdu:2025-15896 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1079 certfr-2025-avi-1079 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T16:54:23.307781+00:00 certfr-2025-avi-1079 https://cve.radiocsirt.org/vuln/euvd-2026-262937 EUVD-2026-262937 2026-10-02T16:54:23.307801+00:00 EUVD-2026-262937 https://cve.radiocsirt.org/vuln/fkie_cve-2025-42872 fkie_cve-2025-42872 2026-10-02T16:54:23.307813+00:00

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.

 https://cve.radiocsirt.org/vuln/ghsa-4f68-6cfp-mfcj GHSA-4f68-6cfp-mfcj 2026-10-02T16:54:23.307842+00:00

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal, an unauthenticated attacker could inject malicious scripts that execute in the context of other users� browsers, allowing the attacker to steal session cookies, tokens, and other sensitive information. As a result, the vulnerability has a low impact on confidentiality and integrity and no impact on availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2768 WID-SEC-W-2025-2768 — SAP Patchday Dezember 2025: Mehrere Schwachstellen 2026-10-02T16:54:23.307859+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP ausnutzen, um beliebigen Code auszuführen, Systeme zu übernehmen, sensible Daten abzuziehen, interne Ressourcen über SSRF anzusteuern, Dienste zum Absturz zu bringen oder Autorisierungsgrenzen zu umgehen.