https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:46:50 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0369 certfr-2023-avi-0369 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0369 https://cve.radiocsirt.org/vuln/euvd-2026-212256 EUVD-2026-212256 https://cve.radiocsirt.org/vuln/euvd-2026-212256 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28762 <p>SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting into accessing and modifying data. The attacker can also make the system partially or entirely unavailable.</p> <p>SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting into accessing and modifying data. The attacker can also make the system partially or entirely unavailable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28762 https://cve.radiocsirt.org/vuln/ghsa-gxjj-x2hp-4vcx <p>SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting into accessing and modifying data. The attacker can also make the system partially or entirely unavailable.</p> <p>SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate any user on the platform resulting into accessing and modifying data. The attacker can also make the system partially or entirely unavailable.</p> https://cve.radiocsirt.org/vuln/ghsa-gxjj-x2hp-4vcx https://cve.radiocsirt.org/vuln/gsd-2023-28762 gsd-2023-28762 https://cve.radiocsirt.org/vuln/gsd-2023-28762 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1168 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1168