Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 16:07:35 +0000 certfr-2021-avi-017 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2021-avi-017 certfr-2021-avi-017 https://cve.radiocsirt.org/vuln/certfr-2021-avi-017 cnvd-2021-03702 https://cve.radiocsirt.org/vuln/cnvd-2021-03702 cnvd-2021-03702 https://cve.radiocsirt.org/vuln/cnvd-2021-03702 EUVD-2026-22240 https://cve.radiocsirt.org/vuln/euvd-2026-22240 EUVD-2026-22240 https://cve.radiocsirt.org/vuln/euvd-2026-22240 fkie_cve-2021-21445 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21445 <p>SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.</p> <p>SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21445 GHSA-w4g5-mcc7-3767 https://cve.radiocsirt.org/vuln/ghsa-w4g5-mcc7-3767 <p>SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.</p> <p>SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.</p> https://cve.radiocsirt.org/vuln/ghsa-w4g5-mcc7-3767 gsd-2021-21445 https://cve.radiocsirt.org/vuln/gsd-2021-21445 gsd-2021-21445 https://cve.radiocsirt.org/vuln/gsd-2021-21445