CVE-2019-0281

MEDIUM 6.1CVE-2019-0281 · Published 10/07/2019 · updated 17/06/2026

In short

CVE-2019-0281 is a MEDIUM (CVSS 6.1) vulnerability affecting openui5 (sap).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 71.1% of all vulnerabilities.
Fix: update to 1.44.39, 1.52.25, 1.60.6, 1.38.39 or later.

Package	Affected versions	Patched versions
openui5 sap	`≥ 1.40.0, < 1.44.39≥ 1.50.0, < 1.52.25≥ 1.60.0, < 1.60.6< 1.38.39`	`1.44.391.52.251.60.61.38.39`

Description

SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

References

securityfocus.com/bid/109077 · Third Party Advisory
launchpad.support.sap.com · Permissions Required
wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free