description: SAPUI5 and OpenUI5, before versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
problem types: Cross-Site Scripting
affected:
{
product: OpenUI5
vendor: SAP SE
versions:
status: affected, version: 1.38.39
status: affected, version: 1.44.39
status: affected, version: 1.52.25
status: affected, version: 1.60.6
status: affected, version: 1.63.0
}
{
product: SAPUI5
vendor: SAP SE
versions:
status: affected, version: 1.38.39
status: affected, version: 1.44.39
status: affected, version: 1.52.25
status: affected, version: 1.60.6
status: affected, version: 1.63.0
}
