CVE-2005-3634

EPSS 19.4%

Vexday Risk Score

43Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 19.4%KEV nãoPoC públicaNuclei simMetasploit —Patch —

Lifecycle

09 Nov 2005Public PoC

16 Nov 2005Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/26488unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=113156525006667&w=2 http://secunia.com/advisories/17515/http://securityreason.com/securityalert/163 https://exchange.xforce.ibmcloud.com/vulnerabilities/23031 http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf http://www.securityfocus.com/bid/15362 http://www.securitytracker.com/alerts/2005/Nov/1015174.html http://www.vupen.com/english/advisories/2005/2361