CVE-2005-3636

Currently unrated

Key Information:

Vendor
SAP
Status
SAP Web Application Server
Vendor
CVE Published:
16 November 2005

Summary

Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.

References

http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_Multi...
x_refsource_MISC
http://securityreason.com/securityalert/162
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/15361
vdb-entryx_refsource_BID

EPSS Score

22% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.