CVE-2005-3633 in Web Application Serverinfo

Summary

HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

11/16/2005

Disclosure

11/16/2005

Entries

1

CPE

ready

CWE

CWE-80

Exploit

Download

CVSS

6.3

EPSS

0.00979

CTI

0.00

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!