Login Request a demo
Unscored severity · published Nov 16, 2005
CVE-2005-3636
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages
–
CVSS
5.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.1% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SW
Sap Web Application Server · Sap
6.10 · source: NVD
Affected product
SW
Sap Web Application Server
Sap
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3636
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3636
marc.info
http://marc.info/?l=bugtraq&m=113156601505542&w=2
Vendor Advisory
http://secunia.com/advisories/17515/
securityreason.com
http://securityreason.com/securityalert/162
www.cybsec.com
http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf
www.osvdb.org
http://www.osvdb.org/20715
Exploit
http://www.securityfocus.com/bid/15361
More from Sap Web Application Server
–
CVE-2008-2421
Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote…
–
CVE-2007-3615
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of…
–
CVE-2006-6010
SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different…
–
CVE-2006-6011
Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to…
–
CVE-2006-5784
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted…