Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 01:26:31 +0000 certfr-2020-avi-799 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2020-avi-799 certfr-2020-avi-799 https://cve.radiocsirt.org/vuln/certfr-2020-avi-799 cnvd-2021-03704 https://cve.radiocsirt.org/vuln/cnvd-2021-03704 cnvd-2021-03704 https://cve.radiocsirt.org/vuln/cnvd-2021-03704 EUVD-2026-46246 https://cve.radiocsirt.org/vuln/euvd-2026-46246 EUVD-2026-46246 https://cve.radiocsirt.org/vuln/euvd-2026-46246 fkie_cve-2020-26831 https://cve.radiocsirt.org/vuln/fkie_cve-2020-26831 <p>SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-service (DoS).</p> <p>SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-service (DoS).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-26831 GHSA-m3cm-h6wg-q547 https://cve.radiocsirt.org/vuln/ghsa-m3cm-h6wg-q547 <p>SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-service (DoS).</p> <p>SAP BusinessObjects BI Platform (Crystal Report), versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file disclosure, internal directories disclosure, Server-Side Request Forgery (SSRF) and denial-of-service (DoS).</p> https://cve.radiocsirt.org/vuln/ghsa-m3cm-h6wg-q547 gsd-2020-26831 https://cve.radiocsirt.org/vuln/gsd-2020-26831 gsd-2020-26831 https://cve.radiocsirt.org/vuln/gsd-2020-26831