CVE-2019-0388

SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cna@sap.com

Published

2019-11-13

Last modified

2024-08-04

Weaknesses

CWE-290

Affected products

• Ui (Sap)
• Sap Ui (Sap Se)
• Sap Ui 700 (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2843016
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390