Cross-Site Scripting Vulnerability in SAP Data Services Management Console

CVE-2025-26662

What is CVE-2025-26662?

The Data Services Management Console is vulnerable to Cross-Site Scripting (XSS) due to improper encoding of user-controlled inputs. This vulnerability allows an attacker to inject malicious scripts into the console, which are executed in the browser context of a user who clicks on a compromised link. While availability remains unaffected, this exploitation can severely impact the confidentiality and integrity of user data.

References