PT-2021-17560 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

CVE-2021-27622

SAP Internet Graphics Service (versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81) is affected by a memory corruption vulnerability in CDrawRaster::LoadImageFromMemory() that can be exploited unauthenticated over a network to crash the system, rendering it unavailable. The issue originates from insuffi...

CVE-2021-27627

CVE-2021-27627 affects SAP Internet Graphics Service (versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81). The issue stems from insufficient input validation in ChartInterpreter::DoIt(), which may allow an unauthenticated attacker to submit a crafted IGS request over the network, triggering a memory co...

CVE-2021-27626

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CMiniXMLParser::Parse which will...

CVE-2021-27625

CVE-2021-27625 affects SAP Internet Graphics Service (IGS) versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. The root cause is insufficient input validation in IgsData::freeMemory(), leading to a memory corruption error that can crash the system after an unauthenticated network request that retrieves...

PT-2021-17558 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

CVE-2021-27624

CVE-2021-27624 affects SAP Internet Graphics Service (SAP NetWeaver) versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. The issue arises from insufficient input validation in CiXMLIStreamRawBuffer::readRaw(), allowing an unauthenticated attacker to submit a malicious IGS request over the network that ...

PT-2021-17557 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

PT-2021-17555 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

CVE-2021-27626

Affected software: SAP Internet Graphics Service (IGS) versions 7.20, 7.20EXT, 7.53, 7.20_EX2, 7.81. Vulnerability: unauthenticated attacker can submit a malicious IGS request that, due to insufficient input validation in CMiniXMLParser::Parse(), triggers an internal memory corruption and causes ...

CVE-2021-27623

SAP Internet Graphics Service (IGS) vulnerability CVE-2021-27623 affects versions 7.20, 7.20EXT, 7.53, 7.20_EX2, and 7.81. An unauthenticated attacker can trigger a memory corruption by sending a malicious IGS request after obtaining an existing system state value, caused by insufficient input va...

PT-2021-17561 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

PT-2021-17559 · Sap · Sap Internet Graphics Server

Name of the Vulnerable Software and Affected Versions: SAP Internet Graphics Service versions 7.20, 7.20EXT, 7.53, 7.20 EX2, 7.81 Description: The issue allows an unauthenticated attacker to submit a malicious request over a network after retrieving an existing system state value. This is due to...

CVE-2021-27622

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CDrawRaster::LoadImageFromMemory whic...

CVE-2021-27627

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method ChartInterpreter::DoIt which will...

CVE-2021-27624

SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CiXMLIStreamRawBuffer::readRaw which...

CVE-2018-2437

The SAP Internet Graphics Service IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification...

CVE-2018-2437

The SAP Internet Graphics Service IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification...

Design/Logic Flaw

The SAP Internet Graphics Service IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification...

Cross site scripting

Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...