CYBSEC Security Advisory – The SAP Web Application Server was found to be vulnerable to HTTP Response Splitting in the parameter sap-exiturl.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41434/CYBEC_HTTP_Response_Splitting_in_SAP_WAS.txt
Source: https://packetstormsecurity.com/files/41434/CYBEC_HTTP_Response_Splitting_in_SAP_WAS.txt.html