Skip to content
OpenAdvisories
Unscored CVE-2019-0281 EUVD-2019-1054GHSA-5h33-prjx-rr5j

SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resu…

Published Jul 10, 2019 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: OpenUI5 Product: SAPUI5

Description

SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
SAP SE OpenUI5 1.38.39, 1.44.39, 1.52.25, 1.60.6, 1.63.0 —
SAP SE SAPUI5 1.38.39, 1.44.39, 1.52.25, 1.60.6, 1.63.0 —

References