https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:53:48.692030+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-15898 bdu:2025-15898 2026-10-02T19:53:48.757538+00:00 bdu:2025-15898 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1079 certfr-2025-avi-1079 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T19:53:48.757580+00:00 certfr-2025-avi-1079 https://cve.radiocsirt.org/vuln/euvd-2026-262918 EUVD-2026-262918 2026-10-02T19:53:48.757600+00:00 EUVD-2026-262918 https://cve.radiocsirt.org/vuln/fkie_cve-2025-42896 fkie_cve-2025-42896 2026-10-02T19:53:48.757613+00:00

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrity, and no impact to availability.

 https://cve.radiocsirt.org/vuln/ghsa-9qf4-6p5h-r4f5 GHSA-9qf4-6p5h-r4f5 2026-10-02T19:53:48.757643+00:00

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrity, and no impact to availability.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2768 WID-SEC-W-2025-2768 — SAP Patchday Dezember 2025: Mehrere Schwachstellen 2026-10-02T19:53:48.757660+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP ausnutzen, um beliebigen Code auszuführen, Systeme zu übernehmen, sensible Daten abzuziehen, interne Ressourcen über SSRF anzusteuern, Dienste zum Absturz zu bringen oder Autorisierungsgrenzen zu umgehen.