5
CVE-2005-3634
- EPSS 2.14%
- Published 16.11.2005 21:22:00
- Last modified 03.04.2025 01:03:51
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
Data is provided by the National Vulnerability Database (NVD)
SAP ≫ Sap Web Application Server Version6.10
SAP ≫ Sap Web Application Server Version6.20
SAP ≫ Sap Web Application Server Version6.40
SAP ≫ Sap Web Application Server Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.14% | 0.835 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|