SAPUI5
9 notes since January 2023.
Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).
| Patch Day | Note | Title | Priority (derived from CVSS, not SAP’s priority) | CVSS |
|---|---|---|---|---|
| October 2026 | 3794572 | Cross-Site Scripting (XSS) vulnerability in SAPUI5 (Support Assistant Overlay) | Medium | 6.1 |
| October 2026 | 3799054 | Cross Site Scripting (XSS) vulnerability in SAPUI5 | Medium | 4.4 |
| September 2026 | 3783189 | Clickjacking vulnerability in SAPUI5(Frame Options Allowlist) | Medium | 4.3 |
| August 2026 | 3772071 | Cross Site Scripting (XSS) vulnerability in SAPUI5 | Medium | 6.1 |
| May 2026 | 3726583 | Content Spoofing vulnerability in SAPUI5 (Search UI) | Medium | 4.7 |
| December 2025 | 3676970 | Denial of Service (DoS) in SAPUI5 framework (Markdown-it component) | Medium | 5.9 |
| June 2025 | 3601169 | HTML Injection in Unprotected SAPUI5 applications | Low | 3.0 |
| May 2024 | 3446076 | Client-side script execution vulnerability in SAP UI5(PDFViewer) | Low | 3.5 |
| May 2023 | 3326210 | Improper Neutralization of Input in SAPUI5 | High | 7.1 |