https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 14:39:42 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0209 certfr-2024-avi-0209 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0209 https://cve.radiocsirt.org/vuln/cnvd-2024-13534 cnvd-2024-13534 https://cve.radiocsirt.org/vuln/cnvd-2024-13534 https://cve.radiocsirt.org/vuln/euvd-2026-4431 EUVD-2026-4431 https://cve.radiocsirt.org/vuln/euvd-2026-4431 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27902 <p>Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system</p> <p>Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27902 https://cve.radiocsirt.org/vuln/ghsa-rh37-q3m6-762g <p>Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system</p> <p>Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. A successful attack can allow a malicious attacker to access and modify data through their ability to execute code in a user’s browser. There is no impact on the availability of the system</p> https://cve.radiocsirt.org/vuln/ghsa-rh37-q3m6-762g https://cve.radiocsirt.org/vuln/gsd-2024-27902 gsd-2024-27902 https://cve.radiocsirt.org/vuln/gsd-2024-27902 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0597 <p>Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting (XSS)-Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0597