Sap Web Application Server (Sap) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2008-05-23. Vendor: Sap.
CVEs of Sap Web Application Server
- CVE-2008-2421 - CVSS 4.3 (medium), 2008-05-23: Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP…
- CVE-2007-3615 - CVSS 7.8 (high), 2007-07-06: Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to…
- CVE-2006-6010 - CVSS 5 (medium), 2006-11-21: SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive…
- CVE-2006-6011 - CVSS 5 (medium), 2006-11-21: Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a…
- CVE-2006-5785 - CVSS 5 (medium), 2006-11-07: Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service…
- CVE-2006-5784 - CVSS 4.6 (medium), 2006-11-07: Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read…
- CVE-2006-1039 - CVSS 6.4 (medium), 2006-03-07: SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive…
- CVE-2005-3634 - CVSS 5 (medium), 2005-11-16: frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary…
- CVE-2005-3633 - CVSS 5 (medium), 2005-11-16: HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML…
- CVE-2005-3636 - CVSS 4.3 (medium), 2005-11-16: Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error…
- CVE-2005-3635 - CVSS 4.3 (medium), 2005-11-16: Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web…
