EUVD-2018-14279

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

SAP UI5 lacks input validation, risking malicious JavaScript in the DOM and user data theft.

Reporter	Title	Published	Views	Family All 6
CNVD	SAP Hana DB, UI5 and UI Cross-Site Scripting Vulnerabilities	14 Jun 201800:00	–	cnvd
CVE	CVE-2018-2424	12 Jun 201815:00	–	cve
Cvelist	CVE-2018-2424	12 Jun 201815:00	–	cvelist
NVD	CVE-2018-2424	12 Jun 201815:29	–	nvd
OSV	CVE-2018-2424	12 Jun 201815:29	–	osv
Prion	Design/Logic Flaw	12 Jun 201815:29	–	prion

[
  {
    "enisaIdVendor": [
      {
        "id": "10d03f31-3ab5-3211-bb3d-eb6ccee68c0c",
        "vendor": {
          "name": "SAP SE"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "13997539-4b01-378d-8400-028f15effa35",
        "product": {
          "name": "SAP UI"
        },
        "product_version": "7.40"
      },
      {
        "id": "31194993-dbfb-3f95-972d-31f11ef355d5",
        "product": {
          "name": "SAP UI5(Java)"
        },
        "product_version": "7.3"
      },
      {
        "id": "60e26b36-d10f-30e8-9f6e-871ec020c9f4",
        "product": {
          "name": "SAP UI5(Java)"
        },
        "product_version": "7.50"
      },
      {
        "id": "6872202f-7608-3d0f-9cb8-680b281aae25",
        "product": {
          "name": "SAP UI for SAP NetWeaver 7.00"
        },
        "product_version": "2.0"
      },
      {
        "id": "7bfea3e4-4685-370c-9c46-4d3264056a86",
        "product": {
          "name": "SAP UI5(Java)"
        },
        "product_version": "7.31"
      },
      {
        "id": "861b4b73-aa3c-376f-aa0f-b0e69d7e1aca",
        "product": {
          "name": "SAP HANA Database"
        },
        "product_version": "1.0"
      },
      {
        "id": "99c4de98-1a7a-31a7-a443-803c4b96c408",
        "product": {
          "name": "SAP UI"
        },
        "product_version": "7.51"
      },
      {
        "id": "b03803d5-d773-37a7-a5bc-f65d9a51a89f",
        "product": {
          "name": "SAP UI5"
        },
        "product_version": "1.0"
      },
      {
        "id": "b3bcb3f0-2ff0-3e92-ac61-98b91c2aa399",
        "product": {
          "name": "SAP UI"
        },
        "product_version": "7.52"
      },
      {
        "id": "c7245a84-cb72-324a-8f5f-1c5f1348001e",
        "product": {
          "name": "SAP HANA Database"
        },
        "product_version": "2.0"
      },
      {
        "id": "f5ae6a5b-5928-3498-a102-b0ea1958462f",
        "product": {
          "name": "SAP UI"
        },
        "product_version": "7.50"
      },
      {
        "id": "fbefe97a-569c-37e9-a245-fc11eaccb288",
        "product": {
          "name": "SAP UI5(Java)"
        },
        "product_version": "7.40"
      }
    ]
  }
]

Source	Link
launchpad	www.launchpad.support.sap.com/
securityfocus	www.securityfocus.com/bid/104459
wiki	www.wiki.scn.sap.com/wiki/pages/viewpage.action
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.8High risk

Vulners AI Score8.8

CVSS 37.5 - 9.8

CVSS 25

EPSS0.00292