Description (CNA)
The Data Services Management Console does not sufficiently encode user-controlled inputs, allowing an attacker to inject malicious script. When a targeted victim, who is already logged in, clicks on the compromised link, the injected script gets executed within the scope of victim�s browser. This potentially leads to an impact on confidentiality and integrity. Availability is not impacted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Data Services Management Console | affected SBOP DS JOB SERVER 4.3 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.
No references supplied.