https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:09:04.029877+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 certfr-2023-avi-1020 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-10-02T12:09:04.094099+00:00 certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-9420 EUVD-2026-9420 2026-10-02T12:09:04.094150+00:00 EUVD-2026-9420 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42476 fkie_cve-2023-42476 2026-10-02T12:09:04.094173+00:00

SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could access data from reporting databases.

 https://cve.radiocsirt.org/vuln/ghsa-c9pm-pp53-grgr GHSA-c9pm-pp53-grgr 2026-10-02T12:09:04.094233+00:00

SAP Business Objects Web Intelligence - version 420, allows an authenticated attacker to inject JavaScript code into Web Intelligence documents which is then executed in the victim’s browser each time the vulnerable page is visited. Successful exploitation can lead to exposure of the data that the user has access to. In the worst case, attacker could access data from reporting databases.

 https://cve.radiocsirt.org/vuln/gsd-2023-42476 gsd-2023-42476 2026-10-02T12:09:04.094268+00:00 gsd-2023-42476 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3103 WID-SEC-W-2023-3103 — SAP Software: Mehrere Schwachstellen 2026-10-02T12:09:04.094290+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.