cveboard RSS feed

CVE-2018-2424

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software components affected are: SAP Hana Database 1.00, 2.00; SAP UI5 1.00; SAP UI5 (Java) 7.30, 7.31, 7.40, 7,50; SAP UI 7.40, 7.50, 7.51, 7.52, and version 2.0 of SAP UI for SAP NetWeaver 7.00

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP HANA Database

Vendor
SAP SE
Product
SAP HANA Database
Platforms
Unknown
Default status
Unknown
SAP HANA Database · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0affectedUnavailableUnavailableUnavailableNone listed
2.0affectedUnavailableUnavailableUnavailableNone listed

SAP UI5

Vendor
SAP SE
Product
SAP UI5
Platforms
Unknown
Default status
Unknown
SAP UI5 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
1.0affectedUnavailableUnavailableUnavailableNone listed

SAP UI5(Java)

Vendor
SAP SE
Product
SAP UI5(Java)
Platforms
Unknown
Default status
Unknown
SAP UI5(Java) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.3affectedUnavailableUnavailableUnavailableNone listed
7.31affectedUnavailableUnavailableUnavailableNone listed
7.40affectedUnavailableUnavailableUnavailableNone listed
7.50affectedUnavailableUnavailableUnavailableNone listed

SAP UI

Vendor
SAP SE
Product
SAP UI
Platforms
Unknown
Default status
Unknown
SAP UI · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.40affectedUnavailableUnavailableUnavailableNone listed
7.50affectedUnavailableUnavailableUnavailableNone listed
7.51affectedUnavailableUnavailableUnavailableNone listed
7.52affectedUnavailableUnavailableUnavailableNone listed

SAP UI for SAP NetWeaver 7.00

Vendor
SAP SE
Product
SAP UI for SAP NetWeaver 7.00
Platforms
Unknown
Default status
Unknown
SAP UI for SAP NetWeaver 7.00 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.0affectedUnavailableUnavailableUnavailableNone listed