Lucene search

[email protected]NVD:CVE-2018-2420

HistoryMay 09, 2018 - 8:29 p.m.

CVE-2018-2420

2018-05-0920:29:00

CWE-434

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

JSON

SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.

Affected configurations

NVD

Node

sapinternet_graphics_serverMatch7.20

sapinternet_graphics_serverMatch7.20ext

sapinternet_graphics_serverMatch7.45

sapinternet_graphics_serverMatch7.49

sapinternet_graphics_serverMatch7.53

References

www.securityfocus.com/bid/104108

blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/

launchpad.support.sap.com/#/notes/2615635

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.0%

JSON

Related for NVD:CVE-2018-2420

prion1 cvelist1 cve1