CVE-2018-2420medium

CVE-2018-2420: medium-severity vulnerability in SAP Internet Graphics Server (IGS)

Published · Updated

Follow this CVE+ Monitor SAP Internet Graphics Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 1.5%
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected products
SAP SE · SAP Internet Graphics Server (IGS)
Related CVEs — SAP Internet Graphics Server (IGS)

In the same product, most dangerous first.

CVE-2018-2423MEDIUMCVE-2018-2423EPSS 2.4%CVE-2018-2421MEDIUMCVE-2018-2421EPSS 2.4%CVE-2018-2422MEDIUMCVE-2018-2422EPSS 1.8%