VYPR
Unrated severityNVD Advisory· Published Jul 6, 2007· Updated Apr 23, 2026

CVE-2007-3613

CVE-2007-3613

Description

Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.

Affected products

9
  • cpe:2.3:a:sap:internet_graphics_server:6.40:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:a:sap:internet_graphics_server:6.40:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:6.40_patch_11:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:6.40_patch_12:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:6.40_patch_13:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:6.40_patch_14:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:6.40_patch_15:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.00_patch_1:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.00_patch_2:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:internet_graphics_server:7.00_patch_3:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

9

News mentions

0

No linked articles in our index yet.