CVE-2018-2437 The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious fil...
CriticalCVSS 9.1
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap internet graphics server | = 7.20 | No fix listed |
| sap internet graphics server | = 7.20ext | No fix listed |
| sap internet graphics server | = 7.45 | No fix listed |
| sap internet graphics server | = 7.49 | No fix listed |
| sap internet graphics server | = 7.53 | No fix listed |
| SAP Internet Graphics Server (IGS) | = = 7.20 | No fix listed |
| SAP Internet Graphics Server (IGS) | = = 7.20EXT | No fix listed |
| SAP Internet Graphics Server (IGS) | = = 7.45 | No fix listed |
| SAP Internet Graphics Server (IGS) | = = 7.49 | No fix listed |
| SAP Internet Graphics Server (IGS) | = = 7.53 | No fix listed |
References
- 104705 third-party-advisory vdb-entry
- launchpad.support.sap.com permissions-required vendor-advisory
- wiki.scn.sap.com vendor-advisory