Vulnerability Details CVE-2018-2438
The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has several denial-of-service vulnerabilities that allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.securityfocus.com/bid/104707
- https://launchpad.support.sap.com/#/notes/2644238
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
- http://www.securityfocus.com/bid/104707
- https://launchpad.support.sap.com/#/notes/2644238
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=497256000
Products affected by CVE-2018-2438
-
cpe:2.3:a:sap:internet_graphics_server:7.20
-
cpe:2.3:a:sap:internet_graphics_server:7.20ext
-
cpe:2.3:a:sap:internet_graphics_server:7.45
-
cpe:2.3:a:sap:internet_graphics_server:7.49
-
cpe:2.3:a:sap:internet_graphics_server:7.53