Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 1:05 a.m.•13 views

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.1CVSS6.9AI score0.00839EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•9 views

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.1CVSS6.9AI score0.00839EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/04/12 5:15 p.m.•24 views

Input validation

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

4.3CVSS6.3AI score0.00839EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•32 views

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.5AI score0.00839EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•3 views

CVE-2022-28770: Improper Neutralization of Input During Web Page Generation

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.1CVSS6.5AI score0.00839EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•1 views

PT-2022-19220

Name of the Vulnerable Software and Affected Versions SAPUI5 libraryvbm versions 75 through 755 Description The issue is caused by insufficient input validation, allowing an unauthenticated attacker to inject a script into the URL and execute code. This can lead to a limited impact on the...

6.1CVSS0.00839EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•16 views

SAPUI5 library 跨站脚本漏洞

SAP SAPUI5 library is a JavaScript application framework from SAP, a German company. SAP SAPUI5 library is vulnerable to cross-site scripting, which can be exploited by unauthenticated attackers to execute JavaScript code on the client side...

6.1CVSS7.3AI score0.00839EPSS
SaveExploits0References4
Rows per page
Query Builder