Known vulnerabilities in SAPUI5 756

Known vulnerabilities in SAPUI5 756

Vendor: SAP

Software: SAPUI5

Version: 756

Software CPE: cpe:2.3:a:sap:sapui5:*:*:*:*:*:*:*:*

Website: https://www.sap.com/

Total vulnerabilities: 6

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.4

Vulnerabilities by Severity

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU119396 - Improper input validation CVE-2025-42873	CWE-20	Medium	No	No	-	09.12.2025	SB2025120918
#VU78636 - Improper Control of Generation of Code ('Code Injection') CVE-2023-30743	CWE-94	Low	No	No	-	25.07.2023	SB2023072748
#VU78634 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-33991	CWE-79	Low	No	No	-	25.07.2023	SB2023072748
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41182	CWE-79	Medium	No	No	-	20.11.2021	SB2021112002 SB2022011944 SB2022011946 and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41184	CWE-79	Medium	Public exploit available	No	-	20.11.2021	SB2021112002 SB2022030804 SB2022041935 and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41183	CWE-79	Medium	No	No	-	20.11.2021	SB2021112002 SB2022011943 SB2022011944 and 33 more