https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 18:21:20 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-017 certfr-2021-avi-017 https://cve.radiocsirt.org/vuln/certfr-2021-avi-017 https://cve.radiocsirt.org/vuln/cnvd-2021-11038 cnvd-2021-11038 https://cve.radiocsirt.org/vuln/cnvd-2021-11038 https://cve.radiocsirt.org/vuln/euvd-2026-22243 EUVD-2026-22243 https://cve.radiocsirt.org/vuln/euvd-2026-22243 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21470 <p>SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configuration files. This occurs as logging service does not disable XML external entities when parsing configuration files and a successful exploit would result in limited impact on integrity and availability of the application.</p> <p>SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configuration files. This occurs as logging service does not disable XML external entities when parsing configuration files and a successful exploit would result in limited impact on integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21470 https://cve.radiocsirt.org/vuln/ghsa-8xxp-2wxg-r73w <p>SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configuration files. This occurs as logging service does not disable XML external entities when parsing configuration files and a successful exploit would result in limited impact on integrity and availability of the application.</p> <p>SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configuration files. This occurs as logging service does not disable XML external entities when parsing configuration files and a successful exploit would result in limited impact on integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-8xxp-2wxg-r73w https://cve.radiocsirt.org/vuln/gsd-2021-21470 gsd-2021-21470 https://cve.radiocsirt.org/vuln/gsd-2021-21470