Skip to content
OpenAdvisories

Product · SAP

SAPUI5(Frame Options Allowlist)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-76977

    Clickjacking vulnerability in SAPUI5(Frame Options Allowlist)

    SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restrictions. If an authenticated victim visits the attacker's page and interacts with…

    SAP SAPUI5(Frame Options Allowlist)