SAP Web Application Server vulnerabilities

11 CVEs affecting SAP Web Application Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-2421, published 2008-05-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-3634, published 2005-11-16. Medium severity, CVSS 5.0. EPSS: 17.8% chance of exploitation in the next 30 days. frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the…
CVE-2006-6010, published 2006-11-21. Medium severity, CVSS 5.0. EPSS: 13.9% chance of exploitation in the next 30 days. SAP allows remote attackers to obtain potentially sensitive information such as operating system and SAP version via an RFC_SYSTEM_INFO RfcCallReceive request, a different vulnerability than…
CVE-2005-3636, published 2005-11-16. Medium severity, CVSS 4.3. EPSS: 5.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in SAP Web Application Server (WAS) 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages.
CVE-2005-3635, published 2005-11-16. Medium severity, CVSS 4.3. EPSS: 5% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in…
CVE-2006-5784, published 2006-11-07. Medium severity, CVSS 4.6. EPSS: 2.9% chance of exploitation in the next 30 days. Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a…
CVE-2006-1039, published 2006-03-07. Medium severity, CVSS 6.4. EPSS: 2.7% chance of exploitation in the next 30 days. SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts,…
CVE-2007-3615, published 2007-07-06. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash)…
CVE-2005-3633, published 2005-11-16. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
CVE-2008-2421, published 2008-05-23. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Web GUI in SAP Web Application Server (WAS) 7.0, Web Dynpro for ABAP (aka WD4A or WDA), and Web Dynpro for BSP allows remote attackers to inject…
CVE-2006-5785, published 2006-11-07. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence…

Latest

CVE-2006-6011, published 2006-11-21. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to port 64999, aka "two…