Headline
CVE-2022-26101
Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
Related news
SAP Fiori Launchpad Cross Site Scripting
The SAP Fiori launchpad suffers from a cross site scripting vulnerability. Various component versions are affected.