Skip to content
SecondTuesday

SAP Note 3772071

Cross Site Scripting (XSS) vulnerability in SAPUI5

MediumCVSS 6.1SAPUI5
CVE(s)
CVE-2026-66771
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Affected products and versions

Appears in

Patch Days listing this note, newest first.

Open note on SAP for Me (SAP login required)