CVE-2018-2393

Description

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

References

https://github.com/Vladimir-Ivanov-Git/sap_igs_xxe

https://launchpad.support.sap.com/#/notes/2525222

https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS