https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 19:57:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-07392 bdu:2023-07392 https://cve.radiocsirt.org/vuln/bdu:2023-07392 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0737 certfr-2023-avi-0737 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0737 https://cve.radiocsirt.org/vuln/euvd-2026-188687 EUVD-2026-188687 https://cve.radiocsirt.org/vuln/euvd-2026-188687 https://cve.radiocsirt.org/vuln/fkie_cve-2023-42472 <p>Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.</p> <p>Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-42472 https://cve.radiocsirt.org/vuln/ghsa-7m6v-v5x3-rc3h <p>Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.</p> <p>Due to insufficient file type validation, SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) - version 420, allows a report creator to upload files from local system into the report over the network. When uploading the image file, an authenticated attacker could intercept the request, modify the content type and the extension to read and modify sensitive data causing a high impact on confidentiality and integrity of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-7m6v-v5x3-rc3h https://cve.radiocsirt.org/vuln/gsd-2023-42472 gsd-2023-42472 https://cve.radiocsirt.org/vuln/gsd-2023-42472 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2309 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder manipulieren, einen Cross-Site-Scripting-Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2309