Vulnerabilities > CVE-2005-3634 - Unspecified vulnerability in SAP web Application Server

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
sap
NVD
Published: 2005-11-16
Updated: 2017-07-11

Summary

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

Vulnerable Configurations

Part Description Count
Application
Sap
4

References