Description (CNA)
SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP UI5 | affected < 1.38.49; affected < 1.52.49; affected < 1.60.34; affected < 1.71.31; affected < 1.78.18; affected < 1.84.5; affected < 1.85.4; affected < 1.86.1 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543
- https://launchpad.support.sap.com/#/notes/3014303
ADP enrichment
No English description supplied.