CVE-2018-2392

2018-02-1412:00:00

sap

www.cve.org

0.003 Low

EPSS

Percentile

68.5%

JSON

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

CNA Affected

[
  {
    "product": "SAP Internet Graphics Server",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "7.20"
      },
      {
        "status": "affected",
        "version": "7.20EXT"
      },
      {
        "status": "affected",
        "version": "7.45"
      },
      {
        "status": "affected",
        "version": "7.49"
      },
      {
        "status": "affected",
        "version": "7.53"
      }
    ]
  }
]