CVE-2019-0281

SAPUI5 and OpenUI5 are affected prior to versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, where user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability. The root cause is insufficient input encoding. Connected documents confirm the issue ...

Unspecified Cross-Site Scripting Vulnerability in SAP SAPUI5

SAP SAPUI5 is a UI technology that provides everything you need to build enterprise-class Web applications. SAP SAPUI5 suffers from an unspecified cross-site scripting vulnerability that stems from the program not properly validating user-supplied input. A remote attacker could use this...