Internet Graphics Server (Sap) - vulnerabilities (CVEs)

28 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2018-08-14. Vendor: Sap.

CVEs of Internet Graphics Server

CVE-2018-2442 - CVSS 8.8 (high), 2018-08-14: In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details…
CVE-2018-2437 - CVSS 9.1 (critical), 2018-07-10: The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to:…
CVE-2018-2439 - CVSS 5.9 (medium), 2018-07-10: The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for…
CVE-2018-2438 - CVSS 7.5 (high), 2018-07-10: The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of-service vulnerabilities that allow an attacker to prevent…
CVE-2018-2423 - CVSS 7.5 (high), 2018-05-09: SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to prevent legitimate users from accessing a…
CVE-2018-2422 - CVSS 7.5 (high), 2018-05-09: SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service,…
CVE-2018-2421 - CVSS 7.5 (high), 2018-05-09: SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitimate users from accessing a service,…
CVE-2018-2420 - CVSS 9.8 (critical), 2018-05-09: SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format…
CVE-2018-2395 - CVSS 8.8 (high), 2018-02-14: Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, overwrite existing…
CVE-2018-2385 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20,…
CVE-2018-2388 - CVSS 6.1 (medium), 2018-02-14: Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVE-2018-2391 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53,…
CVE-2018-2394 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT,…
CVE-2018-2384 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server,…
CVE-2018-2387 - CVSS 6.5 (medium), 2018-02-14: A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to obtain information on ports, which is…
CVE-2018-2390 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53,…
CVE-2018-2393 - CVSS 7.5 (high), 2018-02-14: Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the…
CVE-2018-2396 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53,…
CVE-2018-2383 - CVSS 6.1 (medium), 2018-02-14: Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
CVE-2018-2386 - CVSS 6.5 (medium), 2018-02-14: Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics…
CVE-2018-2389 - CVSS 5.7 (medium), 2018-02-14: Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important…
CVE-2018-2392 - CVSS 7.5 (high), 2018-02-14: Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the…
CVE-2018-2382 - CVSS 6.5 (medium), 2018-02-14: A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to store graphics in a controlled area and…
CVE-2007-3613 - CVSS 4.3 (medium), 2007-07-06: Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or…
CVE-2006-6345 - CVSS 7.5 (high), 2006-12-07: Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote…
CVE-2006-6346 - CVSS 10 (critical), 2006-12-07: Unspecified vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to…
CVE-2006-4134 - CVSS 5 (medium), 2006-08-14: Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to…
CVE-2006-4133 - CVSS 7.5 (high), 2006-08-14: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service…