CVE-2018-2393: Improper Restriction of XML External Entity Reference

Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...

CVE-2018-2390: Undefined Security Weakness

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service...

PT-2018-15525

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue arises from the failure to properly validate XML External Entity, which can cause the SAP Internet Graphics Server IGS to become unavailable under...

PT-2018-15519

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description A malicious user could obtain information on ports, which is not available to the user otherwise, due to a vulnerability in the SAP internet Graphics Server...

sap internet graphics server 6.40 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14369/info Internet Graphics Server is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose t...

Cross site scripting

Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

CVE-2007-3613: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service IGS allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...

SAP Internet Graphics Server 7.0 - ADM:GETLOGFILE?PARAMS Cross-Site Scripting

SAP Internet Graphics Server 7.0 - ADM:GETLOGFILE?PARAMS Cross-Site Scripting source: https://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

SAP Internet Graphics Server 7.0 - 'ADM:GETLOGFILE?PARAMS' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may perform cross-site scripting attacks on unsuspecting users in the context of t...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

SAP IGS未明漏洞

Internet Graphics ServerIGS是SAP R/3企业环境的一个组件，可提供图形服务。 SAP IGS存在多个安全问题，远程攻击者可以利用漏洞关闭SAP IGS服务，访问配置文件，执行未授权服务配置等攻击。 目前没有详细漏洞细节提供。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 7.00 Patch 3 SAP Internet Graphics Server 7.00 Patch 2 SAP Internet Graphics Server 7.00 Patch 1...

CVE-2006-6345

Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...

CVE-2006-6346

Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...

CVE-2006-6345

Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...

CVE-2006-6346

Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...

CVE-2006-6345: Undefined Security Weakness

Directory traversal vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial...

CVE-2006-6346: Undefined Security Weakness

Unspecified vulnerability in SAP Internet Graphics Service IGS 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service service shutdown, obtain sensitive information configuration files, and conduct certain other unauthorized...

CVE-2006-4133

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CVE-2006-4133: Undefined Security Weakness

Heap-based buffer overflow in SAP Internet Graphics Service IGS 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service crash or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the...

CVE-2006-4134: Undefined Security Weakness

Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service IGS 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service service shutdown via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details...