CyberRota Analysis
AI-GeneratedThe SAP Data Services Management Console is vulnerable due to an overly permissive Content Security Policy (CSP) configuration, allowing authenticated users to potentially inject and execute malicious scripts. While the impact on confidentiality and integrity is low, organizations using this application should prioritize addressing this vulnerability, particularly if they have other exploitable weaknesses in their environment. Security teams should review their CSP settings and implement more restrictive directives to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combination with another vulnerability to inject and execute malicious scripts within the application's context. Successful exploitation may result in a low impact on confidentiality and integrity, with no impact on the availability of the application.