Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:45:05 +0000 bdu:2020-00021 https://cve.radiocsirt.org/vuln/bdu:2020-00021 bdu:2020-00021 https://cve.radiocsirt.org/vuln/bdu:2020-00021 certfr-2019-avi-514 — De multiples vulnérabilités ont été découvertes dans plusieurs produits SAP. Certaines d'entre elles permettent à un at… https://cve.radiocsirt.org/vuln/certfr-2019-avi-514 certfr-2019-avi-514 https://cve.radiocsirt.org/vuln/certfr-2019-avi-514 cnvd-2019-34407 https://cve.radiocsirt.org/vuln/cnvd-2019-34407 cnvd-2019-34407 https://cve.radiocsirt.org/vuln/cnvd-2019-34407 EUVD-2026-48501 https://cve.radiocsirt.org/vuln/euvd-2026-48501 EUVD-2026-48501 https://cve.radiocsirt.org/vuln/euvd-2026-48501 fkie_cve-2019-0376 https://cve.radiocsirt.org/vuln/fkie_cve-2019-0376 <p>SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.</p> <p>SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-0376 GHSA-jwhm-c59g-pj67 https://cve.radiocsirt.org/vuln/ghsa-jwhm-c59g-pj67 <p>SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.</p> <p>SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows an attacker to save malicious scripts in the publication name, which can be executed later by the victim, resulting in Stored Cross-Site Scripting.</p> https://cve.radiocsirt.org/vuln/ghsa-jwhm-c59g-pj67 gsd-2019-0376 https://cve.radiocsirt.org/vuln/gsd-2019-0376 gsd-2019-0376 https://cve.radiocsirt.org/vuln/gsd-2019-0376