Cross-Site Scripting Vulnerability in SAP Enterprise Threat Detection

CVE-2022-22529

What is CVE-2022-22529?

SAP Enterprise Threat Detection (ETD) version 2.0 is susceptible to a Cross-Site Scripting (XSS) vulnerability due to inadequate encoding of user-controlled inputs. This deficiency enables unauthorized attackers to potentially exploit the system. Although SAP UI5 standard controls are employed in ETD's user interfaces and are designed to provide automated output encoding, the flaw may still allow malicious user inputs to be executed when reflected back in the interface. Organizations using this version of ETD should implement immediate security measures to mitigate the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References