CVE-2018-2393

CVE-2018-2393: vulnerability in SAP Internet Graphics Server

Published · Updated

Follow this CVE+ Monitor SAP Internet Graphics Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 15%
from disclosure to weapon28 days
Published on NVDFeb 14
metasploit+28d
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
Affected products
SAP SE · SAP Internet Graphics Server
Related CVEs — SAP Internet Graphics Server

In the same product, most dangerous first.

CVE-2018-2392—CVE-2018-2392EPSS 41.1%CVE-2018-2395—CVE-2018-2395EPSS 1.5%CVE-2018-2394—CVE-2018-2394EPSS 1.0%CVE-2018-2386—CVE-2018-2386EPSS 1.0%CVE-2018-2396—CVE-2018-2396EPSS 0.9%CVE-2018-2385—CVE-2018-2385EPSS 0.9%