5

CVE-2005-3634

Exploit
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.38% 0.97
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/17515/
Vendor Advisory
http://www.securitytracker.com/alerts/2005/Nov/1015174.html
Vendor Advisory
http://www.vupen.com/english/advisories/2005/2361
http://marc.info/?l=bugtraq&m=113156525006667&w=2
http://securityreason.com/securityalert/163
http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf
http://www.securityfocus.com/bid/15362
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/23031