Advisories · Technology

SAP SE SAP UI.

Every CVE that names SAP SE SAP UI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-0388 CVE record

SAP SE SAP UI: SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53…
- SAP SE SAP UI
- SAP SE SAP UI 700
Not analysed yet 13 Nov 2019
CVE-2018-2428 CVE record

CVSS 5.3 Medium

SAP SE SAP Infrastructure: Under certain conditions SAP UI5 Handler allows an attacker to access information which…
- SAP SE SAP Infrastructure
- SAP SE SAP UI
Not analysed yet 12 Jun 2018
CVE-2018-2424 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

SAP UI5 did not validate user input before adding it to the DOM structure.
- SAP SE SAP HANA Database
- SAP SE SAP UI5
Not analysed yet 12 Jun 2018