SAP SE SAP Data Services Management Console vulnerabilities

2 CVEs affecting SAP SE SAP Data Services Management Console, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44762, published 2026-08-11.

More from SAP SE.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-26662, published 2025-05-13. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on…
• CVE-2026-44762, published 2026-08-11. Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days. SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious…