CVE-2022-22529

CVE-2022-22529 concerns SAP Enterprise Threat Detection (ETD) 2.0. Several sources confirm a vulnerability due to insufficient encoding of user‑controlled inputs, potentially enabling an XSS attack. ETD’s UI uses SAP UI5 standard controls, which provide automated output encoding for their control...

CVE-2020-6254

SAP Enterprise Threat Detection, versions 1.0 and 2.0, has a reflected XSS vulnerability due to insufficient encoding of error response pages. The issue allows payloads to be reflected in responses. Connected sources (NVD/Red Hat CNVD/CVE records) corroborate the flaw and its impact but do not pr...