CVE-2005-3635
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SAP Web Application Server是一款WEB应用服务程序。 SAP Web Application Server (WAS) 6.10至7.00中的多个跨站脚本攻击(XSS)漏洞，可让远程攻击者通过(1)sap-syscmd中的sap-syscmd和(2)SYSTEM PUBLIC测试应用程序中的BspApplication字段注入任意Web脚本或HTML。
Public Exploits 1
ExploitDB · 1
EDB-26487 [webapps]
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2005-3635
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in SAP Web Application Server (WAS) 6.10 through 7.00 allow remote attackers to inject arbitrary web script or HTML via (1) the sap-syscmd in sap-syscmd and (2) the BspApplication field in the SYSTEM PUBLIC test application.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SAP Web Application Server多个跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP Web Application Server是一款WEB应用服务程序。 SAP Web Application Server (WAS) 6.10至7.00中的多个跨站脚本攻击(XSS)漏洞，可让远程攻击者通过(1)sap-syscmd中的sap-syscmd和(2)SYSTEM PUBLIC测试应用程序中的BspApplication字段注入任意Web脚本或HTML。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2005-3635
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-3635
请登录查看更多情报信息。
Vendor Advisories for CVE-2005-3635 (7)
Mailing List Discussions for CVE-2005-3635 (1)
Other References for CVE-2005-3635 (2)
Same Patch Batch · n/a · 2005-11-16 · 191 CVEs total
| CVE-2002-2155 | Trillian IRC模块格式字符串漏洞 | |
| CVE-2002-2142 | BEA WebLogic Server/Express/Integration应用程序移植安全策略存在漏洞 | |
| CVE-2002-2143 | MySimpleNews远程管理员密码可读漏洞 | |
| CVE-2002-2144 | BearShare目录遍历漏洞 | |
| CVE-2002-2145 | Savant Webserver远程受保护文件泄露漏洞 | |
| CVE-2002-2146 | Savant Webserver cgitest.exe远程拒绝服务攻击漏洞 | |
| CVE-2002-2148 | Lucent路由器UDP端口9信息泄漏漏洞 | |
| CVE-2002-2149 | Lucent Access Point IP 服务路由器超长HTTP请求服务拒绝漏洞 | |
| CVE-2002-2150 | 多家厂商防火墙包淹没导致状态表填满漏洞 | |
| CVE-2002-2152 | Software602 Web602 Web服务器未授权管理目录访问漏洞 | |
| CVE-2002-2153 | Oracle Application Server PL/SQL远程格式化串溢出漏洞 | |
| CVE-2002-2154 | Monkey HTTP Daemon 路径遍历漏洞 | |
| CVE-2002-2163 | kv Poll Cookie安全绕过漏洞 | |
| CVE-2002-2168 | Thorsten Korner 123tkShop SQL注入漏洞 | |
| CVE-2002-2167 | Thorsten Korner 123tkShop任意文件包含漏洞 | |
| CVE-2002-2166 | e-Zone FuseTalk搜索结果跨站脚本漏洞 | |
| CVE-2002-2165 | IMHO Webmail Account Hijacking漏洞 | |
| CVE-2002-2164 | 所谓的Outlook Express连接服务拒绝漏洞 | |
| CVE-2002-2159 | Linksys EtherFast Cable/DSL访问权漏洞 | |
| CVE-2002-2156 | Trillian缓冲区溢出漏洞 |
Showing top 20 of 191 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2005-3635
No comments yet