CVE-2005-3634

None

CVSS

—

EPSS

17.8%

Published

Nov 16, 2005

CISA due date

—

The record

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

Affected packages

Ecosystem	Package	Introduced	Fixed