https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:43:59 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0228 certfr-2023-avi-0228 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0228 https://cve.radiocsirt.org/vuln/euvd-2026-219405 EUVD-2026-219405 https://cve.radiocsirt.org/vuln/euvd-2026-219405 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26461 <p>SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.</p> <p>SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26461 https://cve.radiocsirt.org/vuln/ghsa-6cmx-5pqj-8h85 <p>SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.</p> <p>SAP NetWeaver allows (SAP Enterprise Portal) - version 7.50, allows an authenticated attacker with sufficient privileges to access the XML parser which can submit a crafted XML file which when parsed will enable them to access but not modify sensitive files and data. It allows the attacker to view sensitive data which is owned by certain privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-6cmx-5pqj-8h85 https://cve.radiocsirt.org/vuln/gsd-2023-26461 gsd-2023-26461 https://cve.radiocsirt.org/vuln/gsd-2023-26461 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0635 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0635