← Back

CVE-2026-34258

nvd nist
Published: May 12, 2026Modified: Jun 17, 2026

JSON object

Loading...
4.7
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: CNA (Secondary)

Description

SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead victim users into clicking and accessing attacker-controlled pages rendered by the application. This vulnerability has a low impact on confidentiality with no effect on the integrity and availability of the application.

Related CWEs

CWE-451
User Interface (UI) Misrepresentation of Critical Information
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

References (2)

Source: cna@sap.com
Source: cna@sap.com

Timeline

No history available yet.