CVE

Id
14838  
CVE No.
CVE-2005-3634  
Status
Candidate  
Description
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.  
Phase
Assigned (20051116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
114446 14838 CVE-2005-3634 BUGTRAQ:20051109 CYBSEC - Security Advisory: Phishing Vector in SAP WAS  View
114447 14838 CVE-2005-3634 URL:http://marc.info/?l=bugtraq&m=113156525006667&w=2  View
114448 14838 CVE-2005-3634 MISC:http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf  View
114449 14838 CVE-2005-3634 BID:15362  View
114450 14838 CVE-2005-3634 URL:http://www.securityfocus.com/bid/15362  View
114451 14838 CVE-2005-3634 VUPEN:ADV-2005-2361  View
114452 14838 CVE-2005-3634 URL:http://www.vupen.com/english/advisories/2005/2361  View
114453 14838 CVE-2005-3634 SECTRACK:1015174  View
114454 14838 CVE-2005-3634 URL:http://www.securitytracker.com/alerts/2005/Nov/1015174.html  View
114455 14838 CVE-2005-3634 SECUNIA:17515  View
114456 14838 CVE-2005-3634 URL:http://secunia.com/advisories/17515/  View
114457 14838 CVE-2005-3634 SREASON:163  View
114458 14838 CVE-2005-3634 URL:http://securityreason.com/securityalert/163  View
114459 14838 CVE-2005-3634 XF:sap-sapexiturl-http-header-injection(23031)  View

Related JVN