CVE-2005-3635

published 2005-11-16

CVE-2005-3635: Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

EXPLOIT

Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—
sap	sap_web_application_server	—	—