SAP Internet Graphics Server (IGS) Detection

Detection of SAP Internet Graphics Server IGS !/usr/bin/env python3 -- coding: utf-8 -- """Detection of SAP Internet Graphics Server IGS.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'SAP Internet Graphics Server I...

PT-2018-15563

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue is related to insufficient request validation in the SAP Internet Graphics Server IGS, which can lead to the processing of invalid requests under...

CVE-2018-2439: Improper Input Validation

The SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation for example, where the request is validated for authenticity and validity and under certain conditions, will process invalid requests. Several areas of the SAP Internet Graphics Server IGS d...

CVE-2018-2421: Undefined Security Weakness

SAP Internet Graphics Server IGS Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2423: Undefined Security Weakness

SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

CVE-2018-2420: Unrestricted Upload of File with Dangerous Type

SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file including script files without proper file format validation...

PT-2018-15550

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows an attacker to prevent legitimate users from accessing a service by either crashing or flooding it, affecting the HTTP and RFC listener...

CVE-2018-2422: Undefined Security Weakness

SAP Internet Graphics Server IGS Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...

PT-2018-15521

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to inject log files under certain conditions, potentially hiding important information in the log file. Recommendations For...

PT-2018-15523

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS under certain conditions, specifically via...

CVE-2018-2394: Undefined Security Weakness

Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files...

PT-2018-15522

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS via the IGS Chart service under certain...

PT-2018-15525

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue arises from the failure to properly validate XML External Entity, which can cause the SAP Internet Graphics Server IGS to become unavailable under...

PT-2018-15526

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20 through 7.53 Description The issue allows an unauthenticated malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS services and/or system files under certa...

PT-2018-15524

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue arises from the failure to properly validate XML External Entity, which can cause the SAP Internet Graphics Server IGS to become unavailable under...

CVE-2018-2396: Undefined Security Weakness

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, using IGS Interpreter service...

CVE-2018-2393: Improper Restriction of XML External Entity Reference

Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...