https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:42:54 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-251 certfr-2021-avi-251 https://cve.radiocsirt.org/vuln/certfr-2021-avi-251 https://cve.radiocsirt.org/vuln/cnvd-2021-29876 cnvd-2021-29876 https://cve.radiocsirt.org/vuln/cnvd-2021-29876 https://cve.radiocsirt.org/vuln/euvd-2026-25647 EUVD-2026-25647 https://cve.radiocsirt.org/vuln/euvd-2026-25647 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27602 <p>SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker with this authorization can inject malicious code in the source rules and perform remote code execution enabling them to compromise the confidentiality, integrity and availability of the application.</p> <p>SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker with this authorization can inject malicious code in the source rules and perform remote code execution enabling them to compromise the confidentiality, integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27602 https://cve.radiocsirt.org/vuln/ghsa-cpjq-97hc-mc3c <p>SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker with this authorization can inject malicious code in the source rules and perform remote code execution enabling them to compromise the confidentiality, integrity and availability of the application.</p> <p>SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker with this authorization can inject malicious code in the source rules and perform remote code execution enabling them to compromise the confidentiality, integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-cpjq-97hc-mc3c https://cve.radiocsirt.org/vuln/gsd-2021-27602 gsd-2021-27602 https://cve.radiocsirt.org/vuln/gsd-2021-27602