CVE-2005-3634

published 2005-11-16

CVE-2005-3634: frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary…

medium 5 CVSS 3.1

AV N AC L Au N C N I P A N

EXPLOIT

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—