https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:02:46 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0114 https://cve.radiocsirt.org/vuln/cnvd-2025-14809 cnvd-2025-14809 https://cve.radiocsirt.org/vuln/cnvd-2025-14809 https://cve.radiocsirt.org/vuln/euvd-2026-218016 EUVD-2026-218016 https://cve.radiocsirt.org/vuln/euvd-2026-218016 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24874 <p>SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.</p> <p>SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24874 https://cve.radiocsirt.org/vuln/ghsa-9r9v-644h-2p8g <p>SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.</p> <p>SAP Commerce (Backoffice) uses the deprecated X-FRAME-OPTIONS header to protect against clickjacking. While this protection remains effective now, it may not be the case in the future as browsers might discontinue support for this header in favor of the frame-ancestors CSP directive. Hence, clickjacking could become possible then, and lead to exposure and modification of sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-9r9v-644h-2p8g https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0307 <p>Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um erhöhte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting- und Spoofing-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in der SAP-Software ausnutzen, um erhöhte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting- und Spoofing-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0307