Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:16:28 +0000 certfr-2021-avi-356 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… https://cve.radiocsirt.org/vuln/certfr-2021-avi-356 certfr-2021-avi-356 https://cve.radiocsirt.org/vuln/certfr-2021-avi-356 cnvd-2021-36678 https://cve.radiocsirt.org/vuln/cnvd-2021-36678 cnvd-2021-36678 https://cve.radiocsirt.org/vuln/cnvd-2021-36678 EUVD-2026-25626 https://cve.radiocsirt.org/vuln/euvd-2026-25626 EUVD-2026-25626 https://cve.radiocsirt.org/vuln/euvd-2026-25626 fkie_cve-2021-27619 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27619 <p>SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search results are masked, the user can iteratively enter one character at a time to search and determine the masked attribute value thereby leading to information disclosure.</p> <p>SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search results are masked, the user can iteratively enter one character at a time to search and determine the masked attribute value thereby leading to information disclosure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27619 GHSA-wcj9-7cp9-cw82 https://cve.radiocsirt.org/vuln/ghsa-wcj9-7cp9-cw82 <p>SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search results are masked, the user can iteratively enter one character at a time to search and determine the masked attribute value thereby leading to information disclosure.</p> <p>SAP Commerce (Backoffice Search), versions - 1808, 1811, 1905, 2005, 2011, allows a low privileged user to search for attributes which are not supposed to be displayed to them. Although the search results are masked, the user can iteratively enter one character at a time to search and determine the masked attribute value thereby leading to information disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-wcj9-7cp9-cw82 gsd-2021-27619 https://cve.radiocsirt.org/vuln/gsd-2021-27619 gsd-2021-27619 https://cve.radiocsirt.org/vuln/gsd-2021-27619