Skip to content
OpenAdvisories

Product · SAP

SAPUI5

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2026-89106

    Cross Site Scripting (XSS) vulnerability in SAPUI5

    SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and …

    SAP SAPUI5
  • Medium 6.1
    CVE-2026-66771

    Cross Site Scripting (XSS) vulnerability in SAPUI5

    SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application changes. When another user subsequently opens the adapted application, the injected script executes in the victim's browser session. Succ…

    SAP SAPUI5