CVE-2018-2392

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

Score

CVSS 3.0 7.5 High

Status

Modified - cna@sap.com

Published

2018-02-14

Last modified

2024-08-05

Weaknesses

CWE-112, CWE-611

Affected products

• Internet Graphics Server (Sap)
• Sap Internet Graphics Server (Sap Se)

References

• https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
• https://launchpad.support.sap.com/#/notes/2525222