https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:07:26 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05450 bdu:2026-05450 https://cve.radiocsirt.org/vuln/bdu:2026-05450 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0434 certfr-2026-avi-0434 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0434 https://cve.radiocsirt.org/vuln/euvd-2026-291112 EUVD-2026-291112 https://cve.radiocsirt.org/vuln/euvd-2026-291112 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34264 <p>During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information causing a high impact on confidentiality, while integrity and availability are unaffected.</p> <p>During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information causing a high impact on confidentiality, while integrity and availability are unaffected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34264 https://cve.radiocsirt.org/vuln/ghsa-4c58-m4cg-6h2f <p>During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information causing a high impact on confidentiality, while integrity and availability are unaffected.</p> <p>During authorization checks in SAP Human Capital Management for SAP S/4HANA, the system returns specific messages. Due to this, an authenticated user with low privileges could guess and enumerate the content shown, beyond their authorized scope. This leads to disclosure of sensitive information causing a high impact on confidentiality, while integrity and availability are unaffected.</p> https://cve.radiocsirt.org/vuln/ghsa-4c58-m4cg-6h2f https://cve.radiocsirt.org/vuln/ncsc-2026-0113 NCSC-2026-0113 https://cve.radiocsirt.org/vuln/ncsc-2026-0113 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1078 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um SQL-Injection durchzuführen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Auswirkungen zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um SQL-Injection durchzuführen, erweiterte Berechtigungen zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder andere nicht näher spezifizierte Auswirkungen zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1078