https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:40:23 +0000 https://cve.radiocsirt.org/vuln/certfr-2020-avi-549 certfr-2020-avi-549 https://cve.radiocsirt.org/vuln/certfr-2020-avi-549 https://cve.radiocsirt.org/vuln/cnvd-2020-65569 cnvd-2020-65569 https://cve.radiocsirt.org/vuln/cnvd-2020-65569 https://cve.radiocsirt.org/vuln/euvd-2026-37236 EUVD-2026-37236 https://cve.radiocsirt.org/vuln/euvd-2026-37236 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6302 <p>SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.</p> <p>SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-6302 https://cve.radiocsirt.org/vuln/ghsa-m697-r4gm-82f3 <p>SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.</p> <p>SAP Commerce versions 6.7, 1808, 1811, 1905, 2005 contains the jSession ID in the backoffice URL when the application is loaded initially. An attacker can get this session ID via shoulder surfing or man in the middle attack and subsequently get access to admin user accounts, leading to Session Fixation and complete compromise of the confidentiality, integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-m697-r4gm-82f3 https://cve.radiocsirt.org/vuln/gsd-2020-6302 gsd-2020-6302 https://cve.radiocsirt.org/vuln/gsd-2020-6302