Command Execution Vulnerability in SAP Internet Graphics Service
CVE-2018-2437
9.1CRITICAL
What is CVE-2018-2437?
The SAP Internet Graphics Service (IGS) is vulnerable to a command execution flaw that allows unauthorized external triggers, enabling attackers to execute IGS commands. This can result in the disclosure of sensitive information and the ability to modify or insert malicious files, posing a significant security threat to systems relying on these affected versions.
Affected Version(s)
SAP Internet Graphics Server (IGS) = 7.20 = 7.20
SAP Internet Graphics Server (IGS) = 7.20EXT = 7.20EXT
SAP Internet Graphics Server (IGS) = 7.45 = 7.45