PT-2022-19220

Name of the Vulnerable Software and Affected Versions SAPUI5 libraryvbm versions 75 through 755 Description The issue is caused by insufficient input validation, allowing an unauthenticated attacker to inject a script into the URL and execute code. This can lead to a limited impact on the...

CVE-2022-28770: Improper Neutralization of Input During Web Page Generation

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...