Cross-Site Scripting Vulnerability in SAP Data Services Management Console

CVE-2025-42973

What is CVE-2025-42973?

A Cross-Site Scripting vulnerability exists in SAP Data Services Management Console that allows authenticated attackers to exploit the search functionality for DQ job status reports. By intercepting user requests, malicious scripts can be injected and executed when vulnerable pages are loaded. This poses a risk to the confidentiality and integrity of user session data without affecting system availability.

References