NetSight
IP …
medium6.1

CVE-2019-0281

SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site …

Impact

SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

VendorProductAffected versions
SapOpenui5
before 1.38.39
from 1.40.0 before 1.44.39
from 1.50.0 before 1.52.25
from 1.60.0 before 1.60.6

Weakness classification

CWE-79

References