SAP Internet Graphics Server (IGS) - XML External Entity Injection

SAP Internet Graphics Servers IGS running versions 7.20, 7.20EXT, 7.45, 7.49, or 7.53 has two XML external entity injection XXE vulnerabilities within the XMLCHART page - CVE-2018-2392 and CVE-2018-2393. These vulnerabilities occur due to a lack of appropriate validation on the Extension HTML tag...

EUVD-2018-14241

Malware in sbrugna...

EUVD-2018-14242

Malware in sbrugna...

EUVD-2018-14245

Malware in sbrugna...

EUVD-2018-14278

Malware in sbrugna...

EUVD-2018-14277

Malware in sbrugna...

EUVD-2018-14239

Malware in sbrugna...

EUVD-2018-14294

Malware in sbrugna...

EUVD-2018-14243

Malware in sbrugna...

EUVD-2005-1693

Malware in sbrugna...

EUVD-2018-14251

Malware in sbrugna...

EUVD-2018-14238

Malware in sbrugna...

EUVD-2018-14275

Malware in sbrugna...

EUVD-2018-14293

Malware in sbrugna...

EUVD-2018-14249

Malware in sbrugna...

EUVD-2018-14240

Malware in sbrugna...

EUVD-2018-14246

Malware in sbrugna...

EUVD-2018-14276

Malware in sbrugna...

EUVD-2018-14244

Malware in sbrugna...

VulnCheck KEV: CVE-2018-2392

Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...