Vulnerabilities > CVE-2005-3633 - Unspecified vulnerability in SAP web Application Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
sap
NVD
Published: 2005-11-16
Updated: 2017-07-11

Summary

HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.

Vulnerable Configurations

Part Description Count
Application
Sap
4

References