CVE-2022-40912

CVE-2022-40912 affects ETAP Safety Manager 1.0.0.32. The vulnerability is a Cross-Site Scripting (XSS) flaw where input passed to the GET parameter action is not properly sanitized before being returned to the user, allowing arbitrary HTML/JS to execute in the victim’s browser within the affected...

CVE-2022-50802

ETAP Safety Manager 1.0.0.32 is affected by an unauthenticated reflected XSS in the 'action' GET parameter. The vulnerability allows injection of HTML/JavaScript to execute in victims’ browsers, potentially leaking credentials or enabling unauthorized actions. The issue is documented across multi...