Skip to content
OpenAdvisories

Product · SAP

SAPUI5 applications

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.0
    CVE-2025-42990

    HTML Injection in Unprotected SAPUI5 applications

    Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlled URL. This issue could impact the integrity of the application. Confidentiality …

    SAP SAPUI5 applications