Sap Data Services Management Console
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_data_services_management_console:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Data Services Management Console (d4afa6d8-d87d-562d-b87a-48c4582c0b4b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44762 |
vulnerable | 2026-09-16 04:33:45.349073 |
Security Misconfiguration in SAP Data Services Management Console
LOW (3.7)
SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicious scripts within the application's context. Successful exploitation may result in a low impact on confidentiality and integrity, with no impact on the availability of the application.
Published: 2026-08-11T00:11:30.871Z
Updated: 2026-08-11T14:33:08.419Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26662 |
vulnerable | 2026-06-08 07:14:49.952252 |
Cross-Site Scripting (XSS) vulnerability in the SAP Data Services Management Console
MEDIUM (4.4)
The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on the compromised link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.
Published: 2025-05-13T00:09:05.682Z
Updated: 2025-11-07T05:03:29.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35226 |
vulnerable | 2026-06-08 05:46:04.303373 |
Details available
SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pages are vulnerable in the DS management console.
Published: 2022-10-11T00:00:00.000Z
Updated: 2024-08-03T09:29:17.458Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.