CVE-2018-2392

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

41.05% chance of exploitation in the next 30 days, 99th percentile

Nuclei

high · CWE-611

Published

2018-02-14

Updated

2024-08-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2392.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2018-2380
• CVE-2018-2393
• CVE-2018-21268
• CVE-2018-25019
• CVE-2018-21037
• CVE-2018-25031