https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T17:17:06.574318+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1497 certfr-2026-avi-1497 — De multiples vulnérabilités ont été découvertes dans les produits SAP. Certaines d'entre elles permettent à un attaquan… 2026-11-10T17:17:06.576920+00:00 certfr-2026-avi-1497 https://db.gcve.eu/vuln/fkie_cve-2026-89129 fkie_cve-2026-89129 2026-11-10T17:17:06.576963+00:00

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitation could allow the attacker to disclose information about connected systems, impacting confidentiality, while integrity and availability remain unaffected.

 https://db.gcve.eu/vuln/ghsa-pjpr-98jv-wmjq GHSA-pjpr-98jv-wmjq 2026-11-10T17:17:06.576997+00:00

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitation could allow the attacker to disclose information about connected systems, impacting confidentiality, while integrity and availability remain unaffected.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4420 WID-SEC-W-2026-4420 — SAP Patch Day November 2026: Mehrere Schwachstellen 2026-11-10T17:17:06.577020+00:00

Ein Angreifer kann mehrere Schwachstellen in SAP Software ausnutzen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen und um beliebigen Programmcode auszuführen.