https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:52:58 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1101 certfr-2022-avi-1101 https://cve.radiocsirt.org/vuln/certfr-2022-avi-1101 https://cve.radiocsirt.org/vuln/euvd-2026-232281 EUVD-2026-232281 https://cve.radiocsirt.org/vuln/euvd-2026-232281 https://cve.radiocsirt.org/vuln/fkie_cve-2022-41271 <p>An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to:</p> <p>* Read any information * Modify sensitive information * Denial of Service attacks (DoS) * SQL Injection</p> <p>An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to:</p> <p>* Read any information * Modify sensitive information * Denial of Service attacks (DoS) * SQL Injection</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-41271 https://cve.radiocsirt.org/vuln/ghsa-h4qc-785v-gj2p <p>An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to: * Read any information * Modify sensitive information * Denial of Service attacks (DoS) * SQL Injection</p> <p>An unauthenticated user can attach to an open interface exposed through JNDI by the Messaging System of SAP NetWeaver Process Integration (PI) - version 7.50. This user can make use of an open naming and directory API to access services that could perform unauthorized operations. The vulnerability affects local users and data, leading to a considerable impact on confidentiality as well as availability and a limited impact on the integrity of the application. These operations can be used to: * Read any information * Modify sensitive information * Denial of Service attacks (DoS) * SQL Injection</p> https://cve.radiocsirt.org/vuln/ghsa-h4qc-785v-gj2p https://cve.radiocsirt.org/vuln/gsd-2022-41271 gsd-2022-41271 https://cve.radiocsirt.org/vuln/gsd-2022-41271 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2290 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2290