Due to insufficient input validation SAPUI5 library(vbm) - versions 750 753 754 755 75 allows an unauthenticated attacker to inject a script into the URL and execute code. On successful exploitation an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.