PT-2018-15518

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20 through 7.53 Description The issue allows a malicious user to provoke an out of bounds buffer overflow, preventing legitimate users from accessing the system under certain conditions...

CVE-2018-2394: Undefined Security Weakness

Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, services and/or system files...

CVE-2018-2382: Undefined Security Weakness

A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and as such gain information from system area, which is not available to the user otherwise...

CVE-2018-2383: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53...

CVE-2018-2389: Improper Encoding or Escaping of Output

Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file...

CVE-2018-2384: NULL Pointer Dereference

Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services...

CVE-2018-2386: Improper Restriction of Operations within the Bounds of a Memory Buffer

Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53...

CVE-2018-2391: Undefined Security Weakness

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS portwatcher service...

CVE-2018-2388: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53...

CVE-2018-2396: Undefined Security Weakness

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, using IGS Interpreter service...

CVE-2018-2393: Improper Restriction of XML External Entity Reference

Under certain conditions SAP Internet Graphics Server IGS 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server IGS to become unavailable...

CVE-2018-2390: Undefined Security Weakness

Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server IGS, 7.20, 7.20EXT, 7.45, 7.49, 7.53, via IGS Chart service...

PT-2018-15521

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to inject log files under certain conditions, potentially hiding important information in the log file. Recommendations For...

PT-2018-15528

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server IGS versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description The issue allows a malicious user to prevent legitimate users from accessing the SAP Internet Graphics Server IGS under certain conditions, by utilizing the...

PT-2018-15514

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server versions 7.20, 7.20EXT, 7.45, 7.49, 7.53 Description A malicious user could exploit this issue to store graphics in a controlled area, potentially gaining access to system information that is not normally available...

sap internet graphics server 6.40 - Directory Traversal vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/14369/info Internet Graphics Server is affected by a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote unauthorized user can disclose t...

SAP Internet Graphics Server 7.0 - ADM:GETLOGFILE?PARAMS Cross-Site Scripting

SAP Internet Graphics Server 7.0 - ADM:GETLOGFILE?PARAMS Cross-Site Scripting source: https://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may...

SAP Internet Graphics Server 7.0 - 'ADM:GETLOGFILE?PARAMS' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24775/info SAP Internet Graphics Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may perform cross-site scripting attacks on unsuspecting users in the context of t...

SAP Internet Graphics Server远程缓冲区溢出漏洞

SAP Internet Graphics Server是SAP R/3企业环境的一个组件，可提供图形服务。 SAP Internet Graphics Server不正确处理用户提交的HTTP请求，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 目前没有详细漏洞细节提供，成功利用漏洞可导致在UNIX系统下获得SAP系统管理员特权，而在windows下可导致获得SYSTEM权限。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 6.40 SAP Internet...

SAP IGS未明漏洞

Internet Graphics ServerIGS是SAP R/3企业环境的一个组件，可提供图形服务。 SAP IGS存在多个安全问题，远程攻击者可以利用漏洞关闭SAP IGS服务，访问配置文件，执行未授权服务配置等攻击。 目前没有详细漏洞细节提供。 SAP Internet Graphics Server 6.40 Patch 11 SAP Internet Graphics Server 7.00 Patch 3 SAP Internet Graphics Server 7.00 Patch 2 SAP Internet Graphics Server 7.00 Patch 1...