cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2019-0388,https://securityvulnerability.io/vulnerability/CVE-2019-0388,Insufficient URL Validation in SAP UI5 HTTP Handler,"The SAP UI5 HTTP Handler contains a vulnerability that stems from insufficient URL validation, enabling attackers to manipulate content delivered to users. This can potentially lead to unauthorized data exposure or further compromise of the application. Relevant versions, including SAP_UI versions 7.5 through 7.54, and SAP UI_700 version 2.0, have been addressed in updated releases, emphasizing the importance of regular product updates to maintain security integrity.",SAP,"SAP Ui,SAP Ui 700",5.3,MEDIUM,0.0008999999845400453,false,,false,false,false,,,false,false,,2019-11-13T22:17:37.000Z,0 CVE-2018-2434,https://securityvulnerability.io/vulnerability/CVE-2018-2434,Content Spoofing Vulnerability in SAP NetWeaver and UI Technology,"A content spoofing issue exists in multiple components of the SAP NetWeaver platform, which can render HTML pages with arbitrary plain text content. This can mislead users, as they may perceive manipulated information as legitimate. The vulnerability is present in several implementations, including UI add-ons and versions of SAP User Interface Technology, but does not allow for the embedding of active content such as JavaScript or hyperlinks, minimizing immediate exploitation risks.",SAP,"SAP Netweaver (ui Infra),SAP Ui Implementation For Decoupled Innovations (ui 700),SAP Netweaver,SAP User Interface Technology (SAP Ui)",4.3,MEDIUM,0.0017399999778717756,false,,false,false,false,,,false,false,,2018-07-10T18:00:00.000Z,0