CVE-2026-109803

SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...

CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)

SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...

CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms)

SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...

CVE-2026-109803

The SAP NetWeaver Knowledge Management (XML Forms) component contains a code injection vulnerability where it fails to sufficiently restrict the selection of XSL transformations processed by its functionality. An authenticated user with appropriate access could trigger an unauthorized XSL transfo...

EUVD-2026-120686

SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...

PT-2026-141250

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Knowledge Management XML Forms affected versions not specified Description SAP NetWeaver Knowledge Management, specifically the XML Forms component, does not sufficiently restrict the selection of XSL transformations. This allows...

CVE-2026-109803: SAP_SE SAP NetWeaver Knowledge Management (XML Forms): SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations…

SAP NetWeaver Knowledge Management XML Forms does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be...

opencti v7.260803.0

Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...

opencti v7.260722.0

Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...

opencti v7.260715.0

Introduction OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. It has been created in order to structure, store, organize and visualize technical and non-technical information about cyber threats. The structuration of th...

EUVD-2026-47448

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge...

EUVD-2026-47141

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Search. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management...

CVE-2026-61261

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge...

CVE-2026-60842

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Search. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management...

PT-2026-63125

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Knowledge Management versions 12.2.3 through 12.2.15 Description A flaw in the User Interface component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to...

CVE-2026-61261: Improper Access Control

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Knowledge...

CVE-2026-60842: Improper Authorization

Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Search. Supported versions that are affected are 12.2.5-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management...

PT-2026-62818

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Oracle Knowledge Management versions 12.2.5 through 12.2.15 Description A flaw in the Search component allows an unauthenticated attacker with network access via HTTP to compromise the system. Exploitation requires huma...

EUVD-2026-31834

OpenKM 6.3.12 contains an unrestricted SQL execution vulnerability that allows authenticated administrative users to execute arbitrary SQL statements against the application database via the DatabaseQuery interface. Attackers can submit malicious SQL queries through the qs parameter to the...

EUVD-2026-30353

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers can enumerate metadata from documents that are invisible to the publish service. This vulnerability is fixed in...