CVE-2005-3634

Description

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23031

http://www.vupen.com/english/advisories/2005/2361

http://www.securitytracker.com/alerts/2005/Nov/1015174.html

http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf

http://securityreason.com/securityalert/163

http://secunia.com/advisories/17515/

http://marc.info/?l=bugtraq&m=113156525006667&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS