PT-2025-20804 · Sap Se · Sap Data Services Management Console

Published 2025-05-13 · Updated 2025-05-13 · CVE-2025-26662

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue concerns insufficient encoding of user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on a compromised link, the injected script gets executed within the scope of the victim's browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-26662

Affected Products

Sap Data Services Management Console

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26662 · Security Note
• https://twitter.com/CVEnew/status/1922135017200795732 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/VulmonFeeds/status/1922249716139442428 · Twitter Post
• https://me.sap.com/notes/3558755 · Note