CVE-2022-22529

SAP Enterprise Threat Detection ETD - version 2.0, does not sufficiently encode user-controlled inputs which may lead to an unauthorized attacker possibly exploit XSS vulnerability. The UIs in ETD are using SAP UI5 standard controls, the UI5 framework provides automated output encoding for its...

CVE-2022-22529

CVE-2022-22529 concerns SAP Enterprise Threat Detection (ETD) 2.0. Several sources confirm a vulnerability due to insufficient encoding of user‑controlled inputs, potentially enabling an XSS attack. ETD’s UI uses SAP UI5 standard controls, which provide automated output encoding for their control...