CVE-2018-2466: SAP Data Services

Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days.

In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting (XSS) vulnerability.

Affected products

• SAP Data Services: version 4.2 only

Published 2018-10-09. Last modified 2026-06-17.