Medium severity6.5NVD Advisory· Published May 9, 2018· Updated Jun 17, 2026
CVE-2018-2420
CVE-2018-2420
Description
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:sap:internet_graphics_server:7.20:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:sap:internet_graphics_server:7.20:*:*:*:*:*:*:*
- cpe:2.3:a:sap:internet_graphics_server:7.20ext:*:*:*:*:*:*:*
- cpe:2.3:a:sap:internet_graphics_server:7.45:*:*:*:*:*:*:*
- cpe:2.3:a:sap:internet_graphics_server:7.49:*:*:*:*:*:*:*
- cpe:2.3:a:sap:internet_graphics_server:7.53:*:*:*:*:*:*:*
- (no CPE)range: 7.20, 7.20EXT, 7.45, 7.49, 7.53
- SAP SE/SAP Internet Graphics Server (IGS)v5Range: 7.20
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/104108nvdThird Party AdvisoryVDB Entry
- blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/nvdVendor Advisory
- launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
News mentions
0No linked articles in our index yet.