Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Internet Graphics Server
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-2437 1 Sap 1 Internet Graphics Server 2020-08-24 6.4 MEDIUM 9.1 CRITICAL
The SAP Internet Graphics Service (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to externally trigger IGS command executions which can lead to: disclosure of information and malicious file insertion or modification.
CVE-2018-2420 1 Sap 1 Internet Graphics Server 2019-10-09 7.5 HIGH 9.8 CRITICAL
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.