vulnwire
5.0med

CVE-2005-36341 exploitNuclei template

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect…

Published 20 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
17.8%
percentile 97%
Public exploits
1
Exploit-DB · Nuclei check

frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.

Exploit prediction (EPSS)

17.76% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • Nuclei template SAP Web Application Server 6.x/7.0 - Open Redirect · nuclei detection template
  • EDB-26488 SAP Web Application Server 6.x/7.0 - Open Redirection · webapps · 2005-11-09

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

References

  • cybsec.com /vuln/CYBSEC_Security_Advisory_Multiple_XSS_in_SAP_WAS.pdf · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/23031 · vdb-entry, x_refsource_XF, x_transferred
  • securityfocus.com /bid/15362 · vdb-entry, x_refsource_BID, x_transferred
  • securityreason.com /securityalert/163 · third-party-advisory, x_refsource_SREASON, x_transferred
  • marc.info /?l=bugtraq&m=113156525006667&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/17515/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securitytracker.com /alerts/2005/Nov/1015174.html · vdb-entry, x_refsource_SECTRACK, x_transferred
  • vupen.com /english/advisories/2005/2361 · vdb-entry, x_refsource_VUPEN, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.