Vulnerability Details CVE-2018-2395
Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, overwrite existing image or corrupt other type of files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://www.securityfocus.com/bid/103019
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
- https://launchpad.support.sap.com/#/notes/2525222
- http://www.securityfocus.com/bid/103019
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/
- https://launchpad.support.sap.com/#/notes/2525222
Products affected by CVE-2018-2395
-
cpe:2.3:a:sap:internet_graphics_server:7.20
-
cpe:2.3:a:sap:internet_graphics_server:7.20ext
-
cpe:2.3:a:sap:internet_graphics_server:7.45
-
cpe:2.3:a:sap:internet_graphics_server:7.49
-
cpe:2.3:a:sap:internet_graphics_server:7.53