CVE-2018-2392 Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to becom...
HighCVSS 7.5
EPSS 41.1%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap internet graphics server | = 7.20 | No fix listed |
| sap internet graphics server | = 7.20ext | No fix listed |
| sap internet graphics server | = 7.45 | No fix listed |
| sap internet graphics server | = 7.49 | No fix listed |
| sap internet graphics server | = 7.53 | No fix listed |
| SAP_SE SAP Internet Graphics Server | = 7.20 | No fix listed |
| SAP_SE SAP Internet Graphics Server | = 7.20EXT | No fix listed |
| SAP_SE SAP Internet Graphics Server | = 7.45 | No fix listed |
| SAP_SE SAP Internet Graphics Server | = 7.49 | No fix listed |
| SAP_SE SAP Internet Graphics Server | = 7.53 | No fix listed |
References
- blogs.sap.com vendor-advisory
- launchpad.support.sap.com permissions-required vendor-advisory