CVE-2026-44762
Security Misconfiguration in SAP Data Services Management Console
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicious scripts within the application's context. Successful exploitation may result in a low impact on confidentiality and integrity, with no impact on the availability of the application.
| Vendor | sap_se |
| Product | sap data services management console |
| Published | Aug 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for sap_se sap data services management console
Be the first to know when new low vulnerabilities affecting sap_se sap data services management console are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
SAP_SE / SAP Data Services Management Console
SBOP_DS_MANAGEMENT_CONSOLE 4.3 2025