CVE-2018-2392observed exploitation

CVE-2018-2392: vulnerability in SAP Internet Graphics Server

Published · Updated

Follow this CVE+ Monitor SAP Internet Graphics Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

72Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 41%
from disclosure to weapon961 days
Published on NVDFeb 14
1st PoC+961d
metasploit+28d
VulnCheck+2670d
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
Affected products
SAP SE · SAP Internet Graphics Server
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SAP Internet Graphics Server

In the same product, most dangerous first.

CVE-2018-2393—CVE-2018-2393EPSS 15.5%CVE-2018-2395—CVE-2018-2395EPSS 1.5%CVE-2018-2394—CVE-2018-2394EPSS 1.0%CVE-2018-2386—CVE-2018-2386EPSS 1.0%CVE-2018-2385—CVE-2018-2385EPSS 0.9%CVE-2018-2384—CVE-2018-2384EPSS 0.9%