Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sapui5:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sapui5 (96d34f63-76c9-53f0-b884-ff205a440372) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-33007 |
vulnerable | 2026-06-08 06:37:25.074254 |
Client-side script execution vulnerability in SAP UI5(PDFViewer)
LOW (3.5)
PDFViewer is a control delivered as part of SAPUI5 product which shows the PDF content in an embedded mode by default. If a PDF document contains embedded JavaScript (or any harmful client-side script), the PDFViewer will execute the JavaScript embedded in the PDF which can cause a potential security threat.
Published: 2024-05-14T03:44:05.434Z
Updated: 2024-10-30T18:34:02.458Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30743 |
vulnerable | 2026-06-08 06:04:40.900932 |
Improper Neutralization of Input in SAPUI5
HIGH (7.1)
Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user’s information through phishing attack.
Published: 2023-05-09T01:35:47.761Z
Updated: 2025-01-28T19:12:13.553Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0281 |
vulnerable | 2026-06-08 05:12:19.621680 |
Details available
SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Published: 2019-07-10T18:46:17.000Z
Updated: 2024-08-04T17:44:16.570Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.