https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:48:08 +0000 https://cve.radiocsirt.org/vuln/certfr-2021-avi-702 certfr-2021-avi-702 https://cve.radiocsirt.org/vuln/certfr-2021-avi-702 https://cve.radiocsirt.org/vuln/cnvd-2025-02856 cnvd-2025-02856 https://cve.radiocsirt.org/vuln/cnvd-2025-02856 https://cve.radiocsirt.org/vuln/euvd-2026-28571 EUVD-2026-28571 https://cve.radiocsirt.org/vuln/euvd-2026-28571 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33672 <p>Due to missing encoding in SAP Contact Center&#39;s Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient&#39;s scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.</p> <p>Due to missing encoding in SAP Contact Center&#39;s Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient&#39;s scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-33672 https://cve.radiocsirt.org/vuln/ghsa-v3pv-ppv6-v9rf <p>Due to missing encoding in SAP Contact Center&#39;s Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient&#39;s scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.</p> <p>Due to missing encoding in SAP Contact Center&#39;s Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient&#39;s scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.</p> https://cve.radiocsirt.org/vuln/ghsa-v3pv-ppv6-v9rf https://cve.radiocsirt.org/vuln/gsd-2021-33672 gsd-2021-33672 https://cve.radiocsirt.org/vuln/gsd-2021-33672