XML External Entity (XXE) Vulnerability in SAP Internet Graphics Server (IGS)

XML External Entity (XXE) Vulnerability in SAP Internet Graphics Server (IGS)

CVE-2018-2392 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

Learn more about our Cis Benchmark Audit For Server Software.