CVE-2020-7785 | CRITICAL | 9.8 | 0.02472 | 40.07 | No | No | 2021-02-08 | 2024-09-16 | euvd | This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js.This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js. |
CVE-2018-5553 | CRITICAL | 9.8 | 0.02486 | 40.07 | No | No | 2018-07-10 | 2024-09-16 | euvd | The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware version…The Crestron Console service running on DGE-100, DM-DGE-200-C, and TS-1542-C devices with default configuration and running firmware versions 1.3384.00049.001 and lower are vulnerable to command injection that can be used to gain root-level access. |
CVE-2023-35385 | CRITICAL | 9.8 | 0.02465 | 40.06 | No | No | 2023-08-08 | 2026-08-10 | euvd, nvd | Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2017-13322 | CRITICAL | 10.0 | 0.00158 | 40.06 | No | No | 2025-01-17 | 2025-03-13 | euvd | In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error …In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
CVE-2025-12479 | CRITICAL | 10.0 | 0.00159 | 40.06 | No | No | 2025-10-29 | 2025-10-29 | euvd | Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 …Systemic Lack of Cross-Site Request Forgery (CSRF) Token Implementation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5 . |
CVE-2021-41193 | CRITICAL | 9.8 | 0.02466 | 40.06 | No | No | 2022-03-01 | 2025-04-23 | euvd | wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions p…wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are currently no known workarounds. |
CVE-2017-10615 | CRITICAL | 9.8 | 0.02455 | 40.06 | No | No | 2017-10-13 | 2024-09-16 | euvd | A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacke…A vulnerability in the pluggable authentication module (PAM) of Juniper Networks Junos OS may allow an unauthenticated network based attacker to potentially execute arbitrary code or crash daemons such as telnetd or sshd that make use of PAM. Affected Juniper Networks Junos OS releases are: 14.1 from 14.1R5 prior to 14.1R8-S4, 14.1R9; 14.1X53 prior to 14.1X53-D50 on EX and QFX series; 14.2 from 14.2R3 prior to 14.2R7-S8, 14.2R8; No other Junos OS releases are affected by this issue. No other Juniper Networks products are affected by this issue. |
CVE-2021-43899 | CRITICAL | 9.8 | 0.02446 | 40.06 | No | No | 2021-12-15 | 2024-08-04 | euvd | Microsoft 4K Wireless Display Adapter Remote Code Execution VulnerabilityMicrosoft 4K Wireless Display Adapter Remote Code Execution Vulnerability |
CVE-2024-41316 | CRITICAL | 9.8 | 0.02469 | 40.06 | No | No | 2024-07-22 | 2024-08-02 | euvd | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_canc…TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function. |
CVE-2022-46538 | CRITICAL | 9.8 | 0.02446 | 40.06 | No | No | 2022-12-20 | 2025-04-16 | euvd | Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac. |
CVE-2024-47040 | CRITICAL | 10.0 | 0.00179 | 40.06 | No | No | 2024-12-18 | 2024-12-18 | euvd | There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution priv…There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
CVE-2025-12001 | CRITICAL | 10.0 | 0.00181 | 40.06 | No | No | 2025-10-20 | 2025-10-26 | euvd | Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19…Lack of application manifest sanitation could lead to potential stored XSS.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. |
CVE-2021-30167 | CRITICAL | 9.8 | 0.02443 | 40.06 | No | No | 2021-04-28 | 2024-09-17 | euvd | The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and furth…The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices. |
CVE-2022-48066 | CRITICAL | 9.8 | 0.02443 | 40.06 | No | No | 2023-01-27 | 2025-03-28 | euvd | An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie. |
CVE-2023-20101 | CRITICAL | 9.8 | 0.02447 | 40.06 | No | No | 2023-10-04 | 2025-12-16 | euvd | A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root …A vulnerability in Cisco Emergency Responder could allow an unauthenticated, remote attacker to log in to an affected device using the root account, which has default, static credentials that cannot be changed or deleted.
This vulnerability is due to the presence of static user credentials for the root account that are typically reserved for use during development. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands as the root user. |
CVE-2023-6339 | CRITICAL | 10.0 | 0.00178 | 40.06 | No | No | 2024-01-02 | 2025-06-03 | euvd | Google Nest WiFi Pro root code-execution & user-data compromiseGoogle Nest WiFi Pro root code-execution & user-data compromise |
CVE-2022-22055 | CRITICAL | 9.8 | 0.02467 | 40.06 | No | No | 2022-01-14 | 2024-09-17 | euvd | The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into…The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service. |
CVE-2017-12997 | CRITICAL | 9.8 | 0.02463 | 40.06 | No | No | 2017-09-14 | 2025-12-04 | euvd | The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print().The LLDP parser in tcpdump before 4.9.2 could enter an infinite loop due to a bug in print-lldp.c:lldp_private_8021_print(). |
CVE-2018-6331 | CRITICAL | 9.8 | 0.02452 | 40.06 | No | No | 2018-12-31 | 2025-05-06 | euvd | Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it …Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01. |
CVE-2026-54402 | CRITICAL | 9.9 | 0.01305 | 40.06 | No | No | 2026-07-02 | 2026-07-02 | euvd | A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS t…A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi OS to execute a Command Injection on the host device. |
CVE-2018-9416 | CRITICAL | 10.0 | 0.00165 | 40.06 | No | No | 2024-12-04 | 2024-12-05 | euvd | In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to
an unusual root cause. This could lead to local escalation …In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to
an unusual root cause. This could lead to local escalation of privilege with
System execution privileges needed. User interaction is not needed for
exploitation. |
CVE-2022-45506 | CRITICAL | 9.8 | 0.02461 | 40.06 | No | No | 2022-12-08 | 2025-04-23 | euvd | Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName.Tenda W30E v1.0.1.25(633) was discovered to contain a command injection vulnerability via the fileNameMit parameter at /goform/delFileName. |
CVE-2021-1471 | CRITICAL | 9.9 | 0.01323 | 40.06 | No | No | 2021-03-24 | 2024-11-08 | euvd | Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker …Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2024-48904 | CRITICAL | 9.8 | 0.02444 | 40.06 | No | No | 2024-10-22 | 2024-10-22 | euvd | An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.…An command injection vulnerability in Trend Micro Cloud Edge could allow a remote attacker to execute arbitrary code on affected appliances.
Please note: authentication is not required in order to exploit this vulnerability. |
CVE-2022-45497 | CRITICAL | 9.8 | 0.02461 | 40.06 | No | No | 2022-12-08 | 2025-04-23 | euvd | Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeComma…Tenda W6-S v1.0.0.4(510) was discovered to contain a command injection vulnerability in the tpi_get_ping_output function at /goform/exeCommand. |
CVE-2021-25981 | CRITICAL | 9.8 | 0.02464 | 40.06 | No | No | 2022-01-03 | 2024-08-03 | euvd | In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient S…In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attacker is able to obtain that token (via other, hypothetical attacks) |
CVE-2024-23538 | CRITICAL | 9.9 | 0.01291 | 40.05 | No | No | 2024-03-29 | 2025-02-13 | euvd | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apa…Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5.
Users are recommended to upgrade to version 1.8.5 or 1.9.0, which fix the issue. |
CVE-2024-41318 | CRITICAL | 9.8 | 0.02429 | 40.05 | No | No | 2024-07-22 | 2024-08-02 | euvd | TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_…TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function. |
CVE-2021-40119 | CRITICAL | 9.8 | 0.02417 | 40.05 | No | No | 2021-11-04 | 2024-11-07 | euvd | A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log i…A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this vulnerability by extracting a key from a system under their control. A successful exploit could allow the attacker to log in to an affected system as the root user. |
CVE-2026-0124 | CRITICAL | 10.0 | 0.00136 | 40.05 | No | No | 2026-03-10 | 2026-03-11 | euvd | There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional e…There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. |
CVE-2025-25015 | CRITICAL | 9.9 | 0.01291 | 40.05 | No | No | 2025-03-05 | 2026-02-26 | euvd | Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests.
In Kibana …Prototype pollution in Kibana leads to arbitrary code execution via a crafted file upload and specifically crafted HTTP requests.
In Kibana versions >= 8.15.0 and < 8.17.1, this is exploitable by users with the Viewer role. In Kibana versions 8.17.1 and 8.17.2 , this is only exploitable by users that have roles that contain all the following privileges: fleet-all, integrations-all, actions:execute-advanced-connectors |
CVE-2025-40599 | CRITICAL | 9.1 | 0.10434 | 40.05 | No | No | 2025-07-23 | 2025-07-25 | euvd | An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administr…An authenticated arbitrary file upload vulnerability exists in the SMA 100 series web management interface. A remote attacker with administrative privileges can exploit this flaw to upload arbitrary files to the system, potentially leading to remote code execution. |
CVE-2022-26510 | CRITICAL | 9.9 | 0.01287 | 40.05 | No | No | 2022-05-12 | 2025-04-15 | euvd | A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafte…A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37. A specially-crafted HTTP request can lead to firmware update. An attacker can send a sequence of requests to trigger this vulnerability. |
CVE-2023-51639 | CRITICAL | 9.8 | 0.02418 | 40.05 | No | No | 2024-11-22 | 2024-11-25 | euvd | Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass …Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Allegra. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the downloadExportedChart action. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-22361. |
CVE-2007-2422 | CRITICAL | 9.8 | 0.0243 | 40.05 | No | No | 2007-05-02 | 2025-01-17 | euvd | Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote attackers to execute …Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter to (1) config-bak.php or (2) config.php. NOTE: CVE disputes this vulnerability because the unmodified scripts set the applicable variable to the empty string; reasonable modified copies would use a fixed pathname string |
CVE-2026-26831 | CRITICAL | 9.8 | 0.02421 | 40.05 | No | Yes | 2026-03-25 | 2026-03-28 | euvd, packetstorm | textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with …textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors. When processing files with malicious filenames, the filePath is passed directly to child_process.exec() in lib/extractors/doc.js, rtf.js, dxf.js, images.js, and lib/util.js with inadequate sanitization |
CVE-2022-22687 | CRITICAL | 9.8 | 0.02432 | 40.05 | No | No | 2022-03-25 | 2024-09-16 | euvd | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation…Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors. |
CVE-2026-12537 | CRITICAL | 10.0 | 0.00153 | 40.05 | No | No | 2026-06-24 | 2026-06-24 | euvd | Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli G…Improper Neutralization used in an OS Command in the container launcher in Google Gemini CLI (versions prior to 0.39.1) and run-gemini-cli GitHub Action (versions prior to 0.1.22) on headless CI platforms allows an unprivileged attacker to achieve pre-sandbox host-level code execution a maliciously crafted .gemini/.env file. |
CVE-2023-27836 | CRITICAL | 9.8 | 0.0243 | 40.05 | No | No | 2023-06-13 | 2025-01-06 | euvd | TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the …TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the function sub_ 40A80C. |
CVE-2023-27407 | CRITICAL | 9.9 | 0.01297 | 40.05 | No | No | 2023-05-09 | 2025-01-28 | euvd | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly…A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected device does not properly validate user input, making it susceptible to command injection. This could allow an authenticated remote attacker to access the underlying operating system as the root user. |
CVE-2023-0603 | HIGH | 8.8 | 0.13871 | 40.05 | No | No | 2023-05-08 | 2025-04-23 | euvd | The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as…The Sloth Logo Customizer WordPress plugin through 2.0.2 does not have CSRF check when updating its settings, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack |
CVE-2021-26606 | CRITICAL | 9.8 | 0.02432 | 40.05 | No | No | 2021-08-06 | 2024-09-16 | euvd | A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficien…A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request an affected program. A successful exploit could allow the attacker to remotely execute arbitrary code on a target system. |
CVE-2022-28495 | CRITICAL | 9.8 | 0.02441 | 40.05 | No | No | 2023-03-24 | 2025-02-20 | euvd | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via …TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. |
CVE-2015-10138 | CRITICAL | 9.8 | 0.02425 | 40.05 | No | No | 2025-07-19 | 2026-04-08 | euvd, nvd | The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery…The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0 server and test files in versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible. |
CVE-2023-30135 | CRITICAL | 9.8 | 0.02426 | 40.05 | No | No | 2023-05-05 | 2025-01-29 | euvd | Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnlo…Tenda AC18 v15.03.05.19(6318_)_cn was discovered to contain a command injection vulnerability via the deviceName parameter in the setUsbUnload function. |
CVE-2022-39198 | CRITICAL | 9.8 | 0.02428 | 40.05 | No | No | 2022-10-18 | 2025-05-13 | euvd | A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malicious code execution.…A deserialization vulnerability existed in dubbo hessian-lite 3.2.12 and its earlier versions, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.17 and prior versions; Apache Dubbo 3.0.x version 3.0.11 and prior versions; Apache Dubbo 3.1.x version 3.1.0 and prior versions. |
CVE-2026-28573 | CRITICAL | 10.0 | 0.00138 | 40.05 | No | No | 2026-06-18 | 2026-06-22 | euvd | In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial …In AndroidManifest.xml, there is a possible persistent denial of service due to a missing permission check. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. |
CVE-2024-37091 | CRITICAL | 9.9 | 0.01243 | 40.04 | No | No | 2024-06-24 | 2026-04-28 | euvd | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Wid…Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in StylemixThemes Consulting Elementor Widgets, StylemixThemes Masterstudy Elementor Widgets allows OS Command Injection.This issue affects Consulting Elementor Widgets: from n/a through 1.3.0; Masterstudy Elementor Widgets: from n/a through 1.2.2. |
CVE-2023-40493 | CRITICAL | 9.8 | 0.02388 | 40.04 | No | No | 2024-05-03 | 2024-09-18 | euvd | LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex…LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the implementation of the copySessionFolder command. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
. Was ZDI-CAN-19920. |
CVE-2018-2424 | CRITICAL | 9.8 | 0.02396 | 40.04 | No | No | 2018-06-12 | 2024-08-05 | euvd | SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being ad…SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00 |