https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:34:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-08961 bdu:2023-08961 https://cve.radiocsirt.org/vuln/bdu:2023-08961 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/certfr-2023-avi-1020 https://cve.radiocsirt.org/vuln/euvd-2026-270608 EUVD-2026-270608 https://cve.radiocsirt.org/vuln/euvd-2026-270608 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50422 <p>SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.</p> <p>SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-50422 https://cve.radiocsirt.org/vuln/ghsa-59c9-pxq8-9c73 <p><strong>Affected:</strong> Maven: com.sap.cloud.security:java-security, Maven: com.sap.cloud.security:spring-security, Maven: com.sap.cloud.security.xsuaa:spring-xsuaa</p> <p>### Impact SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.</p> <p>### Patches Upgrade to patched version &gt;= 2.17.0 or &gt;= 3.3.0 We always recommend to upgrade to the latest released version.</p> <p>### Workarounds No workarounds</p> <p>### References https://www.cve.org/CVERecord?id=CVE-2023-50422</p> <p><strong>Affected:</strong> Maven: com.sap.cloud.security:java-security, Maven: com.sap.cloud.security:spring-security, Maven: com.sap.cloud.security.xsuaa:spring-xsuaa</p> <p>### Impact SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.</p> <p>### Patches Upgrade to patched version &gt;= 2.17.0 or &gt;= 3.3.0 We always recommend to upgrade to the latest released version.</p> <p>### Workarounds No workarounds</p> <p>### References https://www.cve.org/CVERecord?id=CVE-2023-50422</p> https://cve.radiocsirt.org/vuln/ghsa-59c9-pxq8-9c73 https://cve.radiocsirt.org/vuln/gsd-2023-50422 gsd-2023-50422 https://cve.radiocsirt.org/vuln/gsd-2023-50422 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3103 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen um seine Privilegien zu erhöhen, Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3103