CVE-2022-26101: SAP Fiori Launchpad

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

• SAP Fiori Launchpad: version 754 only; version 755 only; version 756 only

Published 2022-03-10. Last modified 2026-06-17.