SAP SE SAP Data Services Management Console vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP Data Services Management Console, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2025-26662sap_se · sap data services management consoleCross-Site Scripting (XSS) vulnerability in the SAP Data Services Management ConsoleThe Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on the compromised link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.EPSS0.21%MediumCVE-2022-35226sap_se · sap data services management console +1 moresap_se sap data services management consoleSAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pages are vulnerable in the DS management console.EPSS0.58%LowCVE-2026-44762sap_se · sap data services management consoleSecurity Misconfiguration in SAP Data Services Management ConsoleSAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicious scripts within the application's context. Successful exploitation may result in a low impact on confidentiality and integrity, with no impact on the availability of the application.EPSS0.19%