Vulnerability Description
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.
CVSS Score
7.5
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Internet Graphics Server | 7.20 |
Related Weaknesses (CWE)
References
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2525222Permissions RequiredVendor Advisory
- https://blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2525222Permissions RequiredVendor Advisory
FAQ
What is CVE-2018-2393?
CVE-2018-2393 is a vulnerability with a CVSS score of 7.5 (HIGH). Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to becom...
How severe is CVE-2018-2393?
CVE-2018-2393 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-2393?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Internet Graphics Server.