https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 09:07:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0396 certfr-2025-avi-0396 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0396 https://cve.radiocsirt.org/vuln/cnvd-2025-14969 cnvd-2025-14969 https://cve.radiocsirt.org/vuln/cnvd-2025-14969 https://cve.radiocsirt.org/vuln/euvd-2026-239135 EUVD-2026-239135 https://cve.radiocsirt.org/vuln/euvd-2026-239135 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30011 <p>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected system. This vulnerability has low impact on confidentiality, with no effect on integrity and availability of the application.</p> <p>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected system. This vulnerability has low impact on confidentiality, with no effect on integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-30011 https://cve.radiocsirt.org/vuln/ghsa-xrxq-x8xp-9x7h <p>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected system. This vulnerability has low impact on confidentiality, with no effect on integrity and availability of the application.</p> <p>The Live Auction Cockpit in SAP Supplier Relationship Management (SRM) uses a deprecated java applet component within the affected SRM packages which allows an unauthenticated attacker to send an malicious request to the application, which could disclose the internal version details of the affected system. This vulnerability has low impact on confidentiality, with no effect on integrity and availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-xrxq-x8xp-9x7h https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1002 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Cross-Site-Scripting-Angriffe durchzuführen, vertrauliche Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1002