Cross-Site Scripting Vulnerability in SAP Enterprise Threat Detection

CVE-2022-22529

Summary

SAP Enterprise Threat Detection (ETD) version 2.0 is susceptible to a Cross-Site Scripting (XSS) vulnerability due to inadequate encoding of user-controlled inputs. This deficiency enables unauthorized attackers to potentially exploit the system. Although SAP UI5 standard controls are employed in ETD's user interfaces and are designed to provide automated output encoding, the flaw may still allow malicious user inputs to be executed when reflected back in the interface. Organizations using this version of ETD should implement immediate security measures to mitigate the risk of exploitation.

References