Lucene search
+L

40 matches found

NVD
NVD
•added 2026/08/11 1:17 a.m.•13 views

CVE-2026-44762

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

3.7CVSS0.00186EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/11 12:11 a.m.•11 views

CVE-2026-44762 Security Misconfiguration in SAP Data Services Management Console

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

3.7CVSS5.4AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/11 12:11 a.m.•15 views

EUVD-2026-55862

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

3.7CVSS5.4AI score0.00186EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/11 12:11 a.m.•33 views

CVE-2026-44762 Security Misconfiguration in SAP Data Services Management Console

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

3.7CVSS0.00186EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/11 12:11 a.m.•57 views

CVE-2026-44762

CVE-2026-44762 describes a misconfigured Content Security Policy in SAP Data Services Management Console. The overly permissive CSP and lack of restrictive directives could enable an authenticated attacker, in combination with another vulnerability, to inject and execute scripts in the applicatio...

3.7CVSS5.4AI score0.00186EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/11 12:00 a.m.•11 views

PT-2026-70022

Name of the Vulnerable Software and Affected Versions SAP Data Services Management Console affected versions not specified Description The application allows an overly permissive Content Security Policy CSP configuration and lacks restrictive directives. This weakness could enable an authenticate...

3.7CVSS5.2AI score0.00186EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/11 12:00 a.m.•2 views

CVE-2026-44762: Improper Restriction of Rendered UI Layers or Frames

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

3.7CVSS6.1AI score0.00186EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2018-14321

Malware in sbrugna...

5.4CVSS5.5AI score0.00968EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2022-38118

Malicious code in bioql PyPI...

6.1CVSS6.4AI score0.00547EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-20337

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00183EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/07/10 1:30 a.m.•14 views

CVE-2025-42973

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

5.4CVSS6.3AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/08 1:15 a.m.•13 views

CVE-2025-42973

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

5.4CVSS0.00183EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/07/08 12:37 a.m.•25 views

CVE-2025-42973 Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

5.4CVSS0.00183EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/07/08 12:37 a.m.•8 views

CVE-2025-42973 Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report)

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

5.4CVSS5.8AI score0.00183EPSS
SaveExploits0References2
CVE
CVE
•added 2025/07/08 12:37 a.m.•51 views

CVE-2025-42973

CVE-2025-42973 affects the SAP Data Services Management Console. A cross-site scripting (XSS) vulnerability exists in the search functionality for DQ job status reports. An authenticated attacker can intercept requests to inject malicious script, which executes when the affected page loads. This ...

5.4CVSS5.8AI score0.00183EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/07/08 12:00 a.m.•13 views

SAP Data Services Management Console 跨站脚本漏洞

SAP Data Services Management Console is a centralized management interface for SAP Data Services from SAP, Germany. A cross-site scripting vulnerability exists in SAP Data Services Management Console that originates from cross-site scripting and could affect user session information...

5.4CVSS5.9AI score0.00183EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•0 views

CVE-2025-42973: Improper Neutralization of Input During Web Page Generation

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

5.4CVSS5.8AI score0.00183EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/08 12:00 a.m.•16 views

PT-2025-28291 · Sap · Sap Data Services Management Console

Name of the Vulnerable Software and Affected Versions: SAP Data Services Management Console affected versions not specified Description: The issue is related to a Cross-Site Scripting vulnerability in the search functionality associated with DQ job status reports. An authenticated attacker could...

5.4CVSS5.5AI score0.00183EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/22 9:55 p.m.•17 views

CVE-2022-35226

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...

6.1CVSS6.3AI score0.00547EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/05/19 12:00 a.m.•23 views

SAP Data Services Management Console Cross-Site Scripting Vulnerability

SAP Data Services Management Console is a console for managing and monitoring data services. A cross-site scripting vulnerability exists in SAP Data Services Management Console that stems from the system failing to adequately encode user-controlled input. An attacker could exploit the vulnerabili...

4.4CVSS6.2AI score0.00198EPSS
SaveExploits0References1
Rows per page
Query Builder