https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:28:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0019 certfr-2023-avi-0019 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0019 https://cve.radiocsirt.org/vuln/cnvd-2023-03049 cnvd-2023-03049 https://cve.radiocsirt.org/vuln/cnvd-2023-03049 https://cve.radiocsirt.org/vuln/euvd-2026-227937 EUVD-2026-227937 https://cve.radiocsirt.org/vuln/euvd-2026-227937 https://cve.radiocsirt.org/vuln/fkie_cve-2023-0015 <p>In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.</p> <p>In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-0015 https://cve.radiocsirt.org/vuln/ghsa-7v6p-hrxh-28hh <p>In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.</p> <p>In SAP BusinessObjects Business Intelligence Platform (Web Intelligence user interface) - version 420, some calls return json with wrong content type in the header of the response. As a result, a custom application that calls directly the jsp of Web Intelligence DHTML may be vulnerable to XSS attacks. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-7v6p-hrxh-28hh https://cve.radiocsirt.org/vuln/gsd-2023-0015 gsd-2023-0015 https://cve.radiocsirt.org/vuln/gsd-2023-0015 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0040 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0040