Description
Unprotected SAPUI5 applications allow an attacker with basic privileges to inject malicious HTML code into a webpage, with the goal of redirecting users to the attacker controlled URL. This issue could impact the integrity of the application. Confidentiality or Availability are not impacted.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAPUI5 applications | SAP_UI 750, 754, 755, 756, 757, 758, UI_700 200 | — |
Advisories 2
- NCSC-2025-0186 Kwetsbaarheden verholpen in SAP Producten NCSC-NL (Netherlands) · Jun 10, 2025
- WID-SEC-2025-1264 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 9, 2025