Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

28 records

Priority LOW 39

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML pag…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00695 Published 2018-08-14 No fix listed CWE-352
Priority LOW 30

The SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, has insufficient request validation (for example, where the request is validated for authenticity and validity) and under certain conditions, will…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01536 Published 2018-07-10 No fix listed CWE-20
Priority MEDIUM 45

SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2018-05-09 No fix listed CWE-434
Priority MEDIUM 49

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.1546 Published 2018-02-14 No fix listed CWE-611
Priority MEDIUM 61

Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML External Entity appropriately causing the SAP Internet Graphics Server (IGS) to become unavailable.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.41051 Published 2018-02-14 No fix listed CWE-611
Priority LOW 27

Under certain conditions a malicious user can inject log files of SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, hiding important information in the log file.

CVSS 3.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00698 Published 2018-02-14 No fix listed CWE-116
Priority LOW 31

Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from accessing the SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0098 Published 2018-02-14 No fix listed CWE-119
Priority LOW 31

Under certain conditions a malicious user provoking a Null Pointer dereference can prevent legitimate users from accessing the SAP Internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, and its services.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00906 Published 2018-02-14 No fix listed CWE-476
Load more