Vulnerabilities > CVE-2018-2437 - Unspecified vulnerability in SAP Internet Graphics Server

047910
CVSS 9.1 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
sap
critical
NVD
Published: 2018-07-10
Updated: 2024-11-21

Summary

The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification.

Vulnerable Configurations

Part Description Count
Application
Sap
5

References