CVE-2026-44762: Improper Restriction of Rendered UI Layers or Frames

SAP Data Services Management Console allows an overly permissive Content Security Policy CSP configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicio...

CVE-2025-42973: Improper Neutralization of Input During Web Page Generation

Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...

CVE-2022-35226

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...

CVE-2022-35226: Improper Neutralization of Input During Web Page Generation

SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pag...

SAP Data Services Management 跨站脚本漏洞

SAP Data Services Management is a data services management software from SAP, Germany. It helps ensure that multiple, potentially inconsistent versions of data are not used in different parts of the business, including processes, operations, analytics, and reporting. A cross-site scripting...

PT-2022-22642

Name of the Vulnerable Software and Affected Versions SAP Data Services Management affected versions not specified Description The issue allows an attacker to copy data from a request and echo it into the application's immediate response, leading to a Cross-Site Scripting issue. To perform such a...