https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:16:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10653 bdu:2025-10653 https://cve.radiocsirt.org/vuln/bdu:2025-10653 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0564 certfr-2025-avi-0564 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0564 https://cve.radiocsirt.org/vuln/euvd-2026-247357 EUVD-2026-247357 https://cve.radiocsirt.org/vuln/euvd-2026-247357 https://cve.radiocsirt.org/vuln/fkie_cve-2025-42965 <p>SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitation may lead to information disclosure. This vulnerability does not impact the integrity or availability of the application.</p> <p>SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitation may lead to information disclosure. This vulnerability does not impact the integrity or availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-42965 https://cve.radiocsirt.org/vuln/ghsa-3gwq-rj9c-4f42 <p>SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitation may lead to information disclosure. This vulnerability does not impact the integrity or availability of the application.</p> <p>SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitation may lead to information disclosure. This vulnerability does not impact the integrity or availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-3gwq-rj9c-4f42 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1479 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um erhöhte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um erhöhte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1479