CVE-2005-3633

published 2005-11-16

CVE-2005-3633: HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML…

medium 5 CVSS 3.1

AV N AC L Au N C N I P A N

HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—