https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:32:31 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0877 certfr-2026-avi-0877 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0877 https://cve.radiocsirt.org/vuln/cnvd-2026-28155 cnvd-2026-28155 https://cve.radiocsirt.org/vuln/cnvd-2026-28155 https://cve.radiocsirt.org/vuln/euvd-2026-336289 EUVD-2026-336289 https://cve.radiocsirt.org/vuln/euvd-2026-336289 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44759 <p>SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user&#39;s browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection, resulting in a low impact on the application&#39;s confidentiality and integrity, with no impact on availability.</p> <p>SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user&#39;s browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection, resulting in a low impact on the application&#39;s confidentiality and integrity, with no impact on availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44759 https://cve.radiocsirt.org/vuln/ghsa-fhgw-7ffq-9wp7 <p>SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user&#39;s browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection, resulting in a low impact on the application&#39;s confidentiality and integrity, with no impact on availability.</p> <p>SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user&#39;s browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection, resulting in a low impact on the application&#39;s confidentiality and integrity, with no impact on availability.</p> https://cve.radiocsirt.org/vuln/ghsa-fhgw-7ffq-9wp7 https://cve.radiocsirt.org/vuln/ncsc-2026-0230 NCSC-2026-0230 https://cve.radiocsirt.org/vuln/ncsc-2026-0230 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2308 <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Dateien zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen SQL-Injection Angriff durchzuführen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2308