Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 1:05 a.m.•15 views

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.1CVSS7.2AI score0.00839EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•10 views

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.1CVSS6.9AI score0.00839EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/04/12 5:15 p.m.•26 views

Input validation

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

4.3CVSS6.3AI score0.00839EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•36 views

CVE-2022-28770

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.5AI score0.00839EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•5 views

CVE-2022-28770: Improper Neutralization of Input During Web Page Generation

Due to insufficient input validation, SAPUI5 libraryvbm - versions 750, 753, 754, 755, 75, allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and...

6.1CVSS6.5AI score0.00839EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•18 views

SAPUI5 library cross-site scripting vulnerabilities

SAP SAPUI5 library is a JavaScript application framework from SAP, a German company. SAP SAPUI5 library is vulnerable to cross-site scripting, which can be exploited by unauthenticated attackers to execute JavaScript code on the client side...

6.1CVSS7.3AI score0.00839EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•4 views

PT-2022-19220

Name of the Vulnerable Software and Affected Versions SAPUI5 libraryvbm versions 75 through 755 Description The issue is caused by insufficient input validation, allowing an unauthenticated attacker to inject a script into the URL and execute code. This can lead to a limited impact on the...

6.1CVSS0.00839EPSS
SaveExploits0References5
Rows per page
Query Builder