CVE-2005-3633: Medium severity SAP SAP Web Application Server vulnerability
Published Nov 16, 2005
·Updated
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
Affected Software
4 affected components
SAP SAP Web Application Server=6.10
SAP SAP Web Application Server=6.20
SAP SAP Web Application Server=6.40
SAP SAP Web Application Server=7.0
Event History
Nov 16, 2005
CVE Published
09:22 PM
Nov 17, 2005
CVE Published
via MITRE·02:17 AM
Data Sourced
via MITRE·02:17 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3633?
CVE-2005-3633 is considered a medium severity vulnerability due to its potential impact on web application security.
2
How do I fix CVE-2005-3633?
To fix CVE-2005-3633, update your SAP Web Application Server to the latest version that addresses this vulnerability.
3
What systems are affected by CVE-2005-3633?
CVE-2005-3633 affects SAP Web Application Server versions 6.10, 6.20, 6.40, and 7.0.
4
What type of attack can CVE-2005-3633 facilitate?
CVE-2005-3633 can facilitate HTTP response splitting attacks, allowing attackers to inject arbitrary HTML headers.
5
Is CVE-2005-3633 remotely exploitable?
Yes, CVE-2005-3633 can be exploited remotely by attackers through manipulated URL parameters.