CVE-2026-66771

Name of the Vulnerable Software and Affected Versions SAPUI5 (affected versions not specified)

Description SAPUI5 contains a Cross Site Scripting (XSS) flaw where a key user with content adaptation privileges can inject malicious script content into persisted application changes. This script executes in the browser session of any user who subsequently opens the adapted application. This could allow an attacker to access sensitive session data and perform unauthorized actions on behalf of the victim, impacting confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.