CVE-2018-2437

Published: Jul 10, 2018Modified: Nov 21, 2024

9.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification.

Affected (5)

Products: Sap: Internet Graphics Server

Sap

1 product

Internet Graphics Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Sap Internet Graphics Server	Version 7.20
Sap Internet Graphics Server	Version 7.20ext
Sap Internet Graphics Server	Version 7.45
Sap Internet Graphics Server	Version 7.49
Sap Internet Graphics Server	Version 7.53