Description
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAPUI5 | SAP_UI 750, 754, 755, 756, 757, 758, 816, UI_700 200 | — |
Advisories 1
- WID-SEC-2026-3888 SAP Patch Day Oktober 2026: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 12, 2026