SAP Data Services vulnerabilities

2 CVEs affecting SAP Data Services, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-35226, published 2022-10-11.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-2466, published 2018-10-09. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. In Impact and Lineage Analysis in SAP Data Services, version 4.2, the management console does not sufficiently validate user-controlled inputs, which results in Cross-Site Scripting (XSS)…
• CVE-2022-35226, published 2022-10-11. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The…