https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:41:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-16268 bdu:2025-16268 https://cve.radiocsirt.org/vuln/bdu:2025-16268 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0564 certfr-2025-avi-0564 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0564 https://cve.radiocsirt.org/vuln/euvd-2026-246971 EUVD-2026-246971 https://cve.radiocsirt.org/vuln/euvd-2026-246971 https://cve.radiocsirt.org/vuln/fkie_cve-2025-42969 <p>SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim&#39;s web browser, with no impact on availability of the application.</p> <p>SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim&#39;s web browser, with no impact on availability of the application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-42969 https://cve.radiocsirt.org/vuln/ghsa-jm3v-9fqw-4cxx <p>SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim&#39;s web browser, with no impact on availability of the application.</p> <p>SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to inject a malicious script into a dynamically crafted URL. The victim, when tricked into clicking on this crafted URL unknowingly executes the malicious payload in their browser. On successful exploitation, the attacker can access or modify sensitive information within the scope of victim&#39;s web browser, with no impact on availability of the application.</p> https://cve.radiocsirt.org/vuln/ghsa-jm3v-9fqw-4cxx https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1479 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um erhöhte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um erhöhte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1479