<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 06 Oct 2026 02:22:03 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-34689 — [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow Services)</title>
      <link>https://cve.radiocsirt.org/vuln/cve-2024-34689</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; SAP_SE SAP Business Workflow (WebFlow Services), sap_se sap_business_workflow_\(webflow_services\)&lt;/p&gt;
&lt;p&gt;WebFlow Services of SAP Business Workflow allows
an authenticated attacker to enumerate accessible HTTP endpoints in the
internal network by specially crafting HTTP requests. On successful
exploitation this can result in information disclosure. It has no impact on
integrity and availability of the application.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; SAP_SE SAP Business Workflow (WebFlow Services), sap_se sap_business_workflow_\(webflow_services\)&lt;/p&gt;
&lt;p&gt;WebFlow Services of SAP Business Workflow allows
an authenticated attacker to enumerate accessible HTTP endpoints in the
internal network by specially crafting HTTP requests. On successful
exploitation this can result in information disclosure. It has no impact on
integrity and availability of the application.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cve-2024-34689</guid>
    </item>
  </channel>
</rss>
