<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 02 Jun 2026 00:02:06 +0000</lastBuildDate>
    <item>
      <title>455282c7-a08b-459e-8e60-ac05d1798736</title>
      <link>https://vulnerability.circl.lu/sighting/455282c7-a08b-459e-8e60-ac05d1798736/export</link>
      <description>{"uuid": "455282c7-a08b-459e-8e60-ac05d1798736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43009", "type": "seen", "source": "https://t.me/cvedetector/25146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-43009 - SAP Service Parts Management Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-43009 \nPublished : May 13, 2025, 1:15 a.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T05:30:19.000000Z"}</description>
      <content:encoded>{"uuid": "455282c7-a08b-459e-8e60-ac05d1798736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43009", "type": "seen", "source": "https://t.me/cvedetector/25146", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-43009 - SAP Service Parts Management Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-43009 \nPublished : May 13, 2025, 1:15 a.m. | 1\u00a0hour, 25\u00a0minutes ago \nDescription : SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T05:30:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/455282c7-a08b-459e-8e60-ac05d1798736/export</guid>
      <pubDate>Tue, 13 May 2025 05:30:19 +0000</pubDate>
    </item>
    <item>
      <title>17bbaf1c-6c94-4c10-9975-13515e07fe29</title>
      <link>https://vulnerability.circl.lu/sighting/17bbaf1c-6c94-4c10-9975-13515e07fe29/export</link>
      <description>{"uuid": "17bbaf1c-6c94-4c10-9975-13515e07fe29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43009\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application.\n\ud83d\udccf Published: 2025-05-13T00:19:41.795Z\n\ud83d\udccf Modified: 2025-05-13T14:11:47.930Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/2491817\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-05-13T14:30:47.000000Z"}</description>
      <content:encoded>{"uuid": "17bbaf1c-6c94-4c10-9975-13515e07fe29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-43009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16127", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-43009\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: SAP Service Parts Management (SPM) does not perform necessary authorization checks for an authenticated user, allowing an attacker to escalate privileges. This has low impact on Confidentiality, integrity and availability of the application.\n\ud83d\udccf Published: 2025-05-13T00:19:41.795Z\n\ud83d\udccf Modified: 2025-05-13T14:11:47.930Z\n\ud83d\udd17 References:\n1. https://me.sap.com/notes/2491817\n2. https://url.sap/sapsecuritypatchday", "creation_timestamp": "2025-05-13T14:30:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/17bbaf1c-6c94-4c10-9975-13515e07fe29/export</guid>
      <pubDate>Tue, 13 May 2025 14:30:47 +0000</pubDate>
    </item>
  </channel>
</rss>
