CVE-2018-2437

2018-07-1018:00:00

sap

www.cve.org

AI Score

9.1

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification.

CNA Affected

[
  {
    "product": " SAP Internet Graphics Server (IGS)",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= 7.20"
      },
      {
        "status": "affected",
        "version": "= 7.20EXT"
      },
      {
        "status": "affected",
        "version": "= 7.45"
      },
      {
        "status": "affected",
        "version": "= 7.49"
      },
      {
        "status": "affected",
        "version": "= 7.53"
      }
    ]
  }
]