40 matches found
CVE-2026-44762
SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...
CVE-2026-44762 Security Misconfiguration in SAP Data Services Management Console
SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...
EUVD-2026-55862
SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...
CVE-2026-44762 Security Misconfiguration in SAP Data Services Management Console
SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...
CVE-2026-44762
CVE-2026-44762 describes a misconfigured Content Security Policy in SAP Data Services Management Console. The overly permissive CSP and lack of restrictive directives could enable an authenticated attacker, in combination with another vulnerability, to inject and execute scripts in the applicatio...
PT-2026-70022
Name of the Vulnerable Software and Affected Versions SAP Data Services Management Console affected versions not specified Description The application allows an overly permissive Content Security Policy CSP configuration and lacks restrictive directives. This weakness could enable an authenticate...
CVE-2026-44762: Improper Restriction of Rendered UI Layers or Frames
SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...
EUVD-2018-14321
Malware in sbrugna...
EUVD-2022-38118
Malicious code in bioql PyPI...
EUVD-2025-20337
Malicious code in bioql PyPI...
CVE-2025-42973
Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...
CVE-2025-42973
Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...
CVE-2025-42973 Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)
Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...
CVE-2025-42973 Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)
Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...
CVE-2025-42973
CVE-2025-42973 affects the SAP Data Services Management Console. A cross-site scripting (XSS) vulnerability exists in the search functionality for DQ job status reports. An authenticated attacker can intercept requests to inject malicious script, which executes when the affected page loads. This ...
SAP Data Services Management Console 跨站脚本漏洞
SAP Data Services Management Console is a centralized management interface for SAP Data Services from SAP, Germany. A cross-site scripting vulnerability exists in SAP Data Services Management Console that originates from cross-site scripting and could affect user session information...
CVE-2025-42973: Improper Neutralization of Input During Web Page Generation
Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...
PT-2025-28291 · Sap · Sap Data Services Management Console
Name of the Vulnerable Software and Affected Versions: SAP Data Services Management Console affected versions not specified Description: The issue is related to a Cross-Site Scripting vulnerability in the search functionality associated with DQ job status reports. An authenticated attacker could...
CVE-2022-35226
SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...
SAP Data Services Management Console Cross-Site Scripting Vulnerability
SAP Data Services Management Console is a console for managing and monitoring data services. A cross-site scripting vulnerability exists in SAP Data Services Management Console that stems from the system failing to adequately encode user-controlled input. An attacker could exploit the vulnerabili...