Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2007-3615
Disclosure Date: July 06, 2007 (last updated October 04, 2023)
Internet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service (process crash) via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web cache.
0
Attacker Value
Unknown
CVE-2006-6011
Disclosure Date: November 21, 2006 (last updated October 04, 2023)
Unspecified vulnerability in SAP Web Application Server before 6.40 patch 6 allows remote attackers to cause a denial of service (enserver.exe crash) via a certain UDP packet to port 64999, aka "two bytes UDP crash," a different vulnerability than CVE-2006-5785.
0
Attacker Value
Unknown
CVE-2006-5785
Disclosure Date: November 07, 2006 (last updated October 04, 2023)
Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence on UDP port 64999.
0
Attacker Value
Unknown
CVE-2006-5784
Disclosure Date: November 07, 2006 (last updated October 04, 2023)
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.
0
Attacker Value
Unknown
CVE-2006-1039
Disclosure Date: March 07, 2006 (last updated February 22, 2025)
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP response and obtain sensitive authentication information, or have other impacts, via a ";%20" followed by encoded HTTP headers.
0
Attacker Value
Unknown
CVE-2005-3635
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.
0
Attacker Value
Unknown
CVE-2005-3634
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
0
Attacker Value
Unknown
CVE-2005-3633
Disclosure Date: November 16, 2005 (last updated February 22, 2025)
HTTP response splitting vulnerability in frameset.htm in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to inject arbitrary HTML headers via the sap-exiturl parameter.
0
