CVE-2005-3635: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3635?
CVE-2005-3635 has a high severity due to its potential for remote attackers to execute arbitrary web scripts or HTML.
How do I fix CVE-2005-3635?
To fix CVE-2005-3635, upgrade to a later version of the SAP Web Application Server that addresses these vulnerabilities.
What software versions are affected by CVE-2005-3635?
CVE-2005-3635 affects SAP Web Application Server versions 6.10, 6.20, 6.40, and 7.00.
What types of attacks are possible with CVE-2005-3635?
CVE-2005-3635 allows remote attackers to perform cross-site scripting (XSS) attacks.
Which fields are involved in the attack vector for CVE-2005-3635?
The attack vector for CVE-2005-3635 involves the sap-syscmd and BspApplication fields in the SYSTEM PUBLIC test application.