SAP » Sap Web Application Server : Security Vulnerabilities, CVEs, Published In 2005 CVSS score >= 5
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
Max CVSS
5.0
EPSS Score
2.84%
Published
2005-11-16
Updated
2017-07-11
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
Max CVSS
5.0
EPSS Score
0.97%
Published
2005-11-16
Updated
2017-07-11
2 vulnerabilities found