Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:54:15 +0000 certfr-2020-avi-630 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2020-avi-630 certfr-2020-avi-630 https://cve.radiocsirt.org/vuln/certfr-2020-avi-630 cnvd-2020-65562 https://cve.radiocsirt.org/vuln/cnvd-2020-65562 cnvd-2020-65562 https://cve.radiocsirt.org/vuln/cnvd-2020-65562 EUVD-2026-37208 https://cve.radiocsirt.org/vuln/euvd-2026-37208 EUVD-2026-37208 https://cve.radiocsirt.org/vuln/euvd-2026-37208 fkie_cve-2020-6272 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6272 <p>SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability.</p> <p>SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-6272 GHSA-q5ph-qv4m-hcxv https://cve.radiocsirt.org/vuln/ghsa-q5ph-qv4m-hcxv <p>SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability.</p> <p>SAP Commerce Cloud versions - 1808, 1811, 1905, 2005, does not sufficiently encode user inputs, which allows an authenticated and authorized content manager to inject malicious script into several web CMS components. These can be saved and later triggered, if an affected web page is visited, resulting in Cross-Site Scripting (XSS) vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-q5ph-qv4m-hcxv gsd-2020-6272 https://cve.radiocsirt.org/vuln/gsd-2020-6272 gsd-2020-6272 https://cve.radiocsirt.org/vuln/gsd-2020-6272