SAPUI5 vulnerabilities

CVEs whose affected-version data names the SAPUI5 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-89106Medium· 4.4

2w ago

SAP UI5 does not perform sufficient input validation under certain configurations

SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact o…

▾ SunlitSAP_SE · SAPUI5EPSS 0.13%via NVD