https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:27:04.748528+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0141 certfr-2026-avi-0141 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-03T16:27:04.808535+00:00 certfr-2026-avi-0141 https://cve.radiocsirt.org/vuln/euvd-2026-267813 EUVD-2026-267813 2026-10-03T16:27:04.808587+00:00 EUVD-2026-267813 https://cve.radiocsirt.org/vuln/fkie_cve-2026-24325 fkie_cve-2026-24325 2026-10-03T16:27:04.808609+00:00

SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an admin user to inject malicious JavaScript into a website and the injected script gets executed when the user visits the compromised page.This vulnerability has low impact on confidentiality and integrity of the data. There is no impact on the availability of the application.

 https://cve.radiocsirt.org/vuln/ghsa-f378-hr82-h75p GHSA-f378-hr82-h75p 2026-10-03T16:27:04.808661+00:00

SAP BusinessObjects Enterprise does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an admin user to inject malicious JavaScript into a website and the injected script gets executed when the user visits the compromised page.This vulnerability has low impact on confidentiality and integrity of the data. There is no impact on the availability of the application.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0052 NCSC-2026-0052 — Kwetsbaarheden verholpen in SAP producten 2026-10-03T16:27:04.808712+00:00 NCSC-2026-0052 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0354 WID-SEC-W-2026-0354 — SAP Patchday Februar 2026: Mehrere Schwachstellen 2026-10-03T16:27:04.808768+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere, nicht näher spezifizierte Angriffe durchzuführen.