Sap Web Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:sap_web_application_server:6.10:*:*:*:*:*:*:*
part: a version: 6.10 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Sap Web Application Server (bf43f798-e5de-5fd0-ab8d-8ae3a986cece) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-3615 |
vulnerable | 2026-06-08 04:49:54.338371 |
Details available
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.
Published: 2007-07-06T19:00:00.000Z
Updated: 2024-08-07T14:21:36.422Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1039 |
vulnerable | 2026-06-08 04:48:56.077299 |
Details available
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.
Published: 2006-03-07T11:00:00.000Z
Updated: 2024-08-07T16:56:15.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3636 |
vulnerable | 2026-06-08 04:48:41.465049 |
Details available
Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-08-07T23:17:23.638Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3635 |
vulnerable | 2026-06-08 04:48:41.464653 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-08-07T23:17:23.402Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3634 |
vulnerable | 2026-06-08 04:48:41.464181 |
Details available
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
Published: 2005-11-16T21:17:00.000Z
Updated: 2024-08-07T23:17:23.318Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3633 |
vulnerable | 2026-06-08 04:48:41.461392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.