SAP WEB Application Server

DATE	CVE	VULNERABILITY TITLE	RISK
2005-11-16	CVE-2005-3634	Unspecified vulnerability in SAP web Application Server frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter. network low complexity sap	5.0
2005-11-16	CVE-2005-3633	Unspecified vulnerability in SAP web Application Server HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter. network low complexity sap	5.0