PT-2026-39919 · Sap · Sapui5

Published 2026-05-12 · Updated 2026-05-12 · CVE-2026-34258

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAPUI5 (Search UI) (affected versions not specified)

Description An unauthenticated attacker can manipulate specific URL parameters on the Search UI to include malicious content. This content spoofing allows the attacker to mislead users into clicking and accessing attacker-controlled pages rendered by the application. This issue has a low impact on confidentiality and does not affect the integrity or availability of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2026-34258

Affected Products

Sapui5

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-34258 · Security Note
• https://t.me/CVEtracker/53446 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://me.sap.com/notes/3726583 · Note