CVE-2018-2428

CVE-2018-2428 affects SAP Infrastructure 1.0, SAP UI 7.4/7.5/7.51/7.52, and SAP UI for SAP NetWeaver 7.00 (version 2.0). The description indicates that under certain conditions the SAP UI5 Handler can allow an attacker to access information that should be restricted, constituting an information d...

CVE-2018-2428: Undefined Security Weakness

Under certain conditions SAP UI5 Handler allows an attacker to access information which would otherwise be restricted. Software components affected are: SAP Infrastructure 1.0, SAP UI 7.4, 7.5, 7.51, 7.52 and version 2.0 of SAP UI for SAP NetWeaver 7.00...

CVE-2018-2424: Improper Input Validation

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 Java 7.30, 7.31, 7.40...