CVE-2026-89106

Medium

SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially…

[email protected]·CWE-183·Published 2026-10-13

CVSS

4.4

EPSS

0.00

KEV

Exploits

cve.orgen

305 chars

SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability.

NVDen

305 chars

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	4.4	1.3	2.7	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
3.1	Primary	cve.org	4.4	—	—	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
3.1	Secondary	ENISA EUVD	4.4	—	—	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
3.1	Secondary	NVD	4.4	1.3	2.7	CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N